Is this Spyware?
 

I just formatted my drive and everything is clean. I never had a virus on this computer. All my updates are installed. This is my only PC and i use it only for PHP and testing sites i make. Or if i really need a PC. I do not view porn on this computer. I am very cautious with this computer but i am getting this message:

http://jacktse.com/macnn/winsux.gif

What the hell is this from? I thought it may be from AIM but i stopped using it in favor of trillion and it pops up regardless of instant messenging. Is it from explorer? It always appears in front unlike a pop-up ad. That is not an image by the way, it is a dialog box. That is the only thing i can think of but why does it appear like a dialog box? How do i get rid of this thing? Any info? Thanks guys.

From another thread:
It's an exploit of Windows Messenger, just disable it.

I had the same problem. My friend disabled it for me. They stop. It is awesome.

That command string removes MSN Messenger from your system, not the Messenger Service, which can't be removed, only disabled, and is a different program.

To do that, go to Start>Control Panel>Admin Tools>Services, scroll down to Messenger, double-click, select "disable" from the Startup Type dropdown menu, click the Stop button, click Apply, click OK, then reboot your computer.

i use windows messenger and havent received a message like that yet (and i've been using it for a long time).

i do keep my messenger updated and i think that fixes the threat.

MSN Messenger and the Windows Messenger Service are two different things. MSN Messenger is the instant messenger software, while Windows Messenger is an unrelated, embedded Windows XP/NT service created to allow a network administrator to broadcast to all clients in a pop-up window.

how exactly does an administrator do this?

Start -> Run -> net send { IP | Computer Name } message

And yea, the Windows .NET Messenger and MSN messenger both have nothing to do with this, it's the Messenger service that's the culprit (as mentioned above).

thanks, done

Even if you disable messenger, you still have a problem. If you disable messenger, you don't see the pop-ups anymore, but they are still being sent into your computer. The port that the advertisements are using is still open to the internet (and can be exploited by things worse than pop-up ads). Am I wrong?

The packets are being sent over port 80, as far as I know, which you need open for HTTP requests. You get unsolicited packets sent to you all the time anyway, but they were never able to manifest themselves as non-browser pop-ups until someone found a hack.

THANK YOU! I hate those damn things...

CLICK HERE
this is to stop the messenger service type spam you are getting someone explained above that it is not affiliated with MSN messenger service.

I'd suggest just following Johnny Rotten's advice before downloading any programs that screw around with your settings.

As for sending windows messenger messages, I prefer: Start > Run > cmd > net send [IP / Computer name] [message] since you can read whether the send succeeded or failed.

they offer both ways its a trusted site that has been around not long after the messenger spam hit the scene its a good site to hand out to people having this problem as its has both ways of turning it off.

I thought that the packets were sent over ports 139 and 135. Link .

grc.com has a little script, I think it is called killthemessenger that eliminates it, as well. There are several other good scripts as well as a scanner (ShieldsUp!) on there that will help you tighten up and test the security on your pc.

Messenger is so evil. It would be nice if every time someone got one of these pop ups Bill Gates got an electric shock - I wouldn't mind getting them if that was the case !

My school is on a network and every kid has a laptop wirelessly connected to the internet and people use this messenger service all the time; sometimes as ajoke to people who do not know what it is, like "You have a virus"

No, it is not an exploit. It is an abuse of a service that runs on NT series operating systems by default, for a sysadmin to send users notifications. (Please log off the fileserver, it is going down in 15 minutes)