Messenger Service

The machines we love to hate

Moderator: Wiz Feinberg

Clarence Wilson
Posts: 158
Joined: 4 Aug 1998 11:00 pm
Location: morgantown wv usa

Messenger Service

Post by Clarence Wilson »

For the last month, or so, I have my screen covered with an ad, enexpectedly, no matter what program I am using. Is this one of the , about 25 updates MS has automaticly
downloaded since I went to XP?, or a virus
type ?

The program says it is Messenger Service. I can not find it anywhere on my machine. I have a popup blocker called HitMan which says it has blocked 501 hits to date, but does not hit this one.

Any similar experiences?

CEW
Dave Alfstad
Posts: 431
Joined: 24 Mar 1999 1:01 am
Location: Indianola, IA USA

Post by Dave Alfstad »

Clarence,
I had the same thing happening and I looked around and found out how to disable this. This is apparently one of those "wonderful" little things that Microsoft incorporated into WindowsXP. You do not have a virus. Here is how to disable the Messenger so that it doesn't pop up anymore.

Recently a tool has become available that makes it very easy to send SPAM and other messages directly to some Windows computer in the form of a "Messenger Service" Pop-up message.

Disabling this service in no way changes the functioning of MSN Instant Messenger.

To disable it in Windows XP:

Click on the "Start" button.
Right-Click on "My Computer"
Choose "Manage" from the menu that appears.
In the left column Highlight "Services and Applications"
In the right column Double-Click on "Services".
Double-Click on the service called "Messenger".
Click the "Stop" button to stop the service.
Change the "Startup Type:" to "Manual"
Click "Apply".
Click "OK".
Close "Computer Management"


The service should no longer accept those pop-up messages.

Good Luck,
Dave Alfstad
Jeff Agnew
Posts: 741
Joined: 18 Sep 1998 12:01 am
Location: Dallas, TX

Post by Jeff Agnew »

The bigger problem is that you have NetBIOS ports exposed to the Internet, which is a security hazard. Turning off the Messenger service doesn't close these.

The Messenger service is a feature of NT/2000/XP that allows system administrators to send announcements to users on a LAN. It is unfortunately enabled by default in XP.

Spammers developed a new scanner that looks for these open Messenger ports and sends a pop-up ad to those it finds.

Follow this link for information on how to close these exposed ports. Although not written for XP, you can follow the NT section and it will be close enough to get you started.
Clarence Wilson
Posts: 158
Joined: 4 Aug 1998 11:00 pm
Location: morgantown wv usa

Post by Clarence Wilson »

Thanks to you both.

I changed the Messenger thing as I was online.

I looked the other over and saved it and will check it out later.

CEW