Is this Spyware? - Tilted Forum Project Discussion Community

Asshole Lover · 09-20-2003, 06:23 PM

I just formatted my drive and everything is clean. I never had a virus on this computer. All my updates are installed. This is my only PC and i use it only for PHP and testing sites i make. Or if i really need a PC. I do not view porn on this computer. I am very cautious with this computer but i am getting this message:

What the hell is this from? I thought it may be from AIM but i stopped using it in favor of trillion and it pops up regardless of instant messenging. Is it from explorer? It always appears in front unlike a pop-up ad. That is not an image by the way, it is a dialog box. That is the only thing i can think of but why does it appear like a dialog box? How do i get rid of this thing? Any info? Thanks guys.

spectre · 09-20-2003, 06:26 PM

From another thread:

Quote:

Originally posted by sixate
Or you can remove it from your system.

Start----> Run

Put this in and reboot. Messenger will be gone forever.

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

It's an exploit of Windows Messenger, just disable it.

JazzmanAl · 09-20-2003, 07:31 PM

I had the same problem. My friend disabled it for me. They stop. It is awesome.

Johnny Rotten · 09-20-2003, 08:14 PM

That command string removes MSN Messenger from your system, not the Messenger Service, which can't be removed, only disabled, and is a different program.

To do that, go to Start>Control Panel>Admin Tools>Services, scroll down to Messenger, double-click, select "disable" from the Startup Type dropdown menu, click the Stop button, click Apply, click OK, then reboot your computer.

The_Dude · 09-20-2003, 08:20 PM

i use windows messenger and havent received a message like that yet (and i've been using it for a long time).

i do keep my messenger updated and i think that fixes the threat.

Johnny Rotten · 09-20-2003, 08:47 PM

MSN Messenger and the Windows Messenger Service are two different things. MSN Messenger is the instant messenger software, while Windows Messenger is an unrelated, embedded Windows XP/NT service created to allow a network administrator to broadcast to all clients in a pop-up window.

The_Dude · 09-20-2003, 09:44 PM

Quote:

Originally posted by Johnny Rotten
MSN Messenger and the Windows Messenger Service are two different things. MSN Messenger is the instant messenger software, while Windows Messenger is an unrelated, embedded Windows XP/NT service created to allow a network administrator to broadcast to all clients in a pop-up window.

how exactly does an administrator do this?

Flippy · 09-20-2003, 10:30 PM

Start -> Run -> net send { IP | Computer Name } message

And yea, the Windows .NET Messenger and MSN messenger both have nothing to do with this, it's the Messenger service that's the culprit (as mentioned above).

Asshole Lover · 09-21-2003, 06:49 AM

thanks, done

sapiens · 09-28-2003, 04:58 PM

Quote:

Originally posted by Johnny Rotten
That command string removes MSN Messenger from your system, not the Messenger Service, which can't be removed, only disabled, and is a different program.

To do that, go to Start>Control Panel>Admin Tools>Services, scroll down to Messenger, double-click, select "disable" from the Startup Type dropdown menu, click the Stop button, click Apply, click OK, then reboot your computer.

Even if you disable messenger, you still have a problem. If you disable messenger, you don't see the pop-ups anymore, but they are still being sent into your computer. The port that the advertisements are using is still open to the internet (and can be exploited by things worse than pop-up ads). Am I wrong?

Johnny Rotten · 09-28-2003, 05:42 PM

Quote:

Originally posted by sapiens
Even if you disable messenger, you still have a problem. If you disable messenger, you don't see the pop-ups anymore, but they are still being sent into your computer. The port that the advertisements are using is still open to the internet (and can be exploited by things worse than pop-up ads). Am I wrong?

The packets are being sent over port 80, as far as I know, which you need open for HTTP requests. You get unsolicited packets sent to you all the time anyway, but they were never able to manifest themselves as non-browser pop-ups until someone found a hack.

Mr. Mojo · 09-30-2003, 08:51 AM

THANK YOU! I hate those damn things...

MontanaXVI · 09-30-2003, 09:51 AM

CLICK HERE
this is to stop the messenger service type spam you are getting someone explained above that it is not affiliated with MSN messenger service.

Frozen North · 09-30-2003, 10:20 AM

I'd suggest just following Johnny Rotten's advice before downloading any programs that screw around with your settings.

As for sending windows messenger messages, I prefer: Start > Run > cmd > net send [IP / Computer name] [message] since you can read whether the send succeeded or failed.

MontanaXVI · 09-30-2003, 01:08 PM

Quote:

even those with minimal to no knowledge of computers, to be able to stop messenger spam with one click. We also provide instructions on how to manually disable messenger spam, just in case you want to stop messenger spam that way.

they offer both ways its a trusted site that has been around not long after the messenger spam hit the scene its a good site to hand out to people having this problem as its has both ways of turning it off.

sapiens · 10-03-2003, 08:36 AM

Quote:

Originally posted by Johnny Rotten
The packets are being sent over port 80, as far as I know, which you need open for HTTP requests. You get unsolicited packets sent to you all the time anyway, but they were never able to manifest themselves as non-browser pop-ups until someone found a hack.

I thought that the packets were sent over ports 139 and 135. Link .

smarm · 10-03-2003, 09:30 AM

grc.com has a little script, I think it is called killthemessenger that eliminates it, as well. There are several other good scripts as well as a scanner (ShieldsUp!) on there that will help you tighten up and test the security on your pc.

Arc101 · 10-03-2003, 11:41 AM

Messenger is so evil. It would be nice if every time someone got one of these pop ups Bill Gates got an electric shock - I wouldn't mind getting them if that was the case !

soccerchamp76 · 10-04-2003, 02:30 PM

My school is on a network and every kid has a laptop wirelessly connected to the internet and people use this messenger service all the time; sometimes as ajoke to people who do not know what it is, like "You have a virus"

yotta · 10-04-2003, 09:10 PM

Quote:

Originally posted by spectre
From another thread:

It's an exploit of Windows Messenger, just disable it.

No, it is not an exploit. It is an abuse of a service that runs on NT series operating systems by default, for a sysadmin to send users notifications. (Please log off the fileserver, it is going down in 15 minutes)

09-20-2003, 06:23 PM	#1 (permalink)
Asshole Lover Crazy	Is this Spyware? I just formatted my drive and everything is clean. I never had a virus on this computer. All my updates are installed. This is my only PC and i use it only for PHP and testing sites i make. Or if i really need a PC. I do not view porn on this computer. I am very cautious with this computer but i am getting this message: What the hell is this from? I thought it may be from AIM but i stopped using it in favor of trillion and it pops up regardless of instant messenging. Is it from explorer? It always appears in front unlike a pop-up ad. That is not an image by the way, it is a dialog box. That is the only thing i can think of but why does it appear like a dialog box? How do i get rid of this thing? Any info? Thanks guys. __________________ smells like ass, tastes like _______.

09-20-2003, 07:31 PM	#3 (permalink)
JazzmanAl Crazy Location: Iowa?	I had the same problem. My friend disabled it for me. They stop. It is awesome. __________________ I should have been a pair of ragged claws Scuttling across the floors of silent seas. -The Love Song of J. Alfred Prufrock, T.S. Eliot Your dumber then me.

09-20-2003, 08:20 PM	#5 (permalink)
The_Dude The GrandDaddy of them all! Location: Austin, TX	i use windows messenger and havent received a message like that yet (and i've been using it for a long time). i do keep my messenger updated and i think that fixes the threat. __________________ "Luck is what happens when preparation meets opportunity." - Darrel K Royal

09-20-2003, 08:47 PM	#6 (permalink)
Johnny Rotten lost and found Location: Berkeley	MSN Messenger and the Windows Messenger Service are two different things. MSN Messenger is the instant messenger software, while Windows Messenger is an unrelated, embedded Windows XP/NT service created to allow a network administrator to broadcast to all clients in a pop-up window. __________________ "The idea that money doesn't buy you happiness is a lie put about by the rich, to stop the poor from killing them." -- Michael Caine

09-21-2003, 06:49 AM	#9 (permalink)
Asshole Lover Crazy	thanks, done __________________ smells like ass, tastes like _______.

09-20-2003, 08:14 PM	#4 (permalink)
Johnny Rotten lost and found Location: Berkeley	That command string removes MSN Messenger from your system, not the Messenger Service, which can't be removed, only disabled, and is a different program. To do that, go to Start>Control Panel>Admin Tools>Services, scroll down to Messenger, double-click, select "disable" from the Startup Type dropdown menu, click the Stop button, click Apply, click OK, then reboot your computer.

09-20-2003, 10:30 PM	#8 (permalink)
Flippy Banned Location: Greater Vancouver	Start -> Run -> net send { IP \| Computer Name } message And yea, the Windows .NET Messenger and MSN messenger both have nothing to do with this, it's the Messenger service that's the culprit (as mentioned above).

09-30-2003, 08:51 AM	#12 (permalink)
Mr. Mojo Addict Location: NYC	THANK YOU! I hate those damn things... __________________ When I jerk off I feel good for about twenty seconds and then WHAM it's right back into suicidal depression

09-30-2003, 09:51 AM	#13 (permalink)
MontanaXVI Junkie Location: Go A's!!!!	CLICK HERE this is to stop the messenger service type spam you are getting someone explained above that it is not affiliated with MSN messenger service. __________________ Spank you very much

09-30-2003, 10:20 AM	#14 (permalink)
Frozen North Insane Location: Alaska	I'd suggest just following Johnny Rotten's advice before downloading any programs that screw around with your settings. As for sending windows messenger messages, I prefer: Start > Run > cmd > net send [IP / Computer name] [message] since you can read whether the send succeeded or failed.

10-03-2003, 09:30 AM	#17 (permalink)
smarm Insane	grc.com has a little script, I think it is called killthemessenger that eliminates it, as well. There are several other good scripts as well as a scanner (ShieldsUp!) on there that will help you tighten up and test the security on your pc.

10-03-2003, 11:41 AM	#18 (permalink)
Arc101 Addict Location: Nottingham, England	Messenger is so evil. It would be nice if every time someone got one of these pop ups Bill Gates got an electric shock - I wouldn't mind getting them if that was the case !

10-04-2003, 02:30 PM	#19 (permalink)
soccerchamp76 Go Cardinals Location: St. Louis/Cincinnati	My school is on a network and every kid has a laptop wirelessly connected to the internet and people use this messenger service all the time; sometimes as ajoke to people who do not know what it is, like "You have a virus"