|
|||||||
 |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
11-01-2002, 03:27 PM
|
#1 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
Message from Kelly?
Hi,
I just had this message appear on my PC (grab of it is attached) WHY!? Obviously it's a company sending out these messages but I'm very worried. First, I get spam in my email address, I can handle this But for spam to come through the Win2K Administrator Messaging Service! What is the world coming to? On a more serious note, I want to keep NET SEND available still to my LAN but NOT to the outside world! How have they sent me this? Jim [edit] whoops, didn't attach the pic. It's on its way... [/edit]
__________________
Jim |
|
|
|
11-01-2002, 03:31 PM
|
#2 |
|
Member (11 bit)
Join Date: Jul 2002
Posts: 1,729
|
disable the messenger service, not windows messenger, MS will have a fix for these popups soon
|
|
|
|
|
11-01-2002, 03:35 PM
|
#3 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
Here's the picture: (Doh!)
|
|
|
|
|
11-01-2002, 03:37 PM
|
#4 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
oem_guy, I want to KEEP Windows Messenger!
My brother on my LAN uses NET SEND to send me popups some times (this wasn't him though  )Thanks Jim |
|
|
|
|
11-01-2002, 03:45 PM
|
#5 |
|
Member (12 bit)
Join Date: Sep 2001
Location: Racine, WI
Posts: 2,094
  |
I have the same problem with XP. Our service request software uses messenger service to send alerts to my laptop. Anyone know how soon M$ is coming out with a fix for that? They are extremely annoying, since I have a sound set for a message, which makes them grab my attention even more.
|
|
|
|
|
11-01-2002, 03:51 PM
|
#6 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
So you don't think I've got anything to worry about in that some stranger sent a message to my PC?
How did they do that? My IP Address or do they have some other info about me (NetBIOS PC Name or something) Jim |
|
|
|
|
11-01-2002, 03:51 PM
|
#7 |
|
Member (11 bit)
Join Date: Jul 2002
Posts: 1,729
|
It was supposed to be in SP1 but got pulled at the last minute. Not sure when it will be out now, OEM channel says "soon"
|
|
|
|
|
11-01-2002, 03:53 PM
|
#8 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
Sorry? A fix for what exactly, the popups? what if I want to keep them but don't want idiots from around the world sending me messages?
Jim |
|
|
|
|
11-01-2002, 04:03 PM
|
#9 |
|
Member (11 bit)
Join Date: Jul 2002
Posts: 1,729
|
The messenger service is part of the Netbios service that runs on TCP port 139. It was intended for internal messages from server to client. Spammers are scanning for port 139 and sending, in effect, disugised messages. MS is working on a fix for this without disabling the service entirely. The startling thing is how many pc's have Netbios port 139 visible to the outside world. If we were all behind a firewall it wouldnt be a problem in the first place. My advice, for now, if you want to leave the service running for internal use then block port 139 to the outside world. If you cant do this then i would seriously disable the service as it wont be long until its used for more dastardly measures. Netbios is a dangerous thing to expose to the internet.
|
|
|
|
|
11-01-2002, 04:08 PM
|
#10 |
|
Professional gadfly
Join Date: Jan 2002
Location: Minneapolis, MN
Posts: 6,364
 |
oem_guy_2002 is right. Exposing just about any port to the world is a bad idea. Go to http://grc.com/default.htm and click on ShieldsUP! (when it comes back online; the site says a day or two) and have your ports probed. It's not a painful as it sounds, and it will let you know if your PC is letting the world know that it is ready and waiting for people to try and hack it.
|
|
|
|
|
11-01-2002, 04:21 PM
|
#11 |
|
Member (8 bit)
Join Date: Apr 2002
Location: Chicago
Posts: 156
|
The thing that gets me about SPAM and using messenger to advertise is that somewhere, in a boardroom, someone is so out of touch with reality that they think this is a sure-fire way to market their product/service to potential customers. How could anyone be so ridiculously out of touch?
|
|
|
|
|
11-01-2002, 09:51 PM
|
#12 | |
|
Member (10 bit)
Join Date: May 2002
Location: Denver, Colorado
Posts: 772
|
Quote:
i come back completely stealth! 
|
|
|
|
|
|
11-02-2002, 07:29 AM
|
#13 |
|
Ride 'em Cowboy
Join Date: Dec 1999
Location: Dallas, Tx
Posts: 9,109
|
|
|
|
|
11-02-2002, 08:05 AM
|
#14 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
Thanks for the comments, just ran ShieldsUP! Turns out port 139 isn't open to the outside world
Seems strange, anyway I've closed down the messaging service now and am using RealPopup for LAN Messaging needs Thanks again for all of the help, and for putting my mind at ease
|
|
|
|
|
11-02-2002, 10:17 AM
|
#15 |
|
Member (8 bit)
Join Date: Nov 2000
Location: Valley of the Sun, Arizona
Posts: 187
|
I got one of these messages for the first time last night and couldn't believe what I was seeing. I have 2 computers set up with a router and firewall, but only one computer got the message. Now I realize it was my own fault letting someone get through. I use my computer with Netmeeting and a webcam to talk to my parents. To use the webcam with a Linksys router, you have to open that computer up directly to the internet and bypass the firewall by using what's called DMZ host. I checked, and I had forgotten to close the DMZ host after my last webcam session. Hopefully that is why only the open computer got the message and I will be safe as long as I remember to keep the firewall on.
__________________
Dave |
|
|
|
|
11-02-2002, 10:30 AM
|
#16 |
|
Member (11 bit)
Join Date: Jul 2002
Posts: 1,729
|
Davidoo1, thats exactly why it got through. Dont worry, as long as you get out of the DMZ after your conference you'll be fine.
|
|
|
|
|
11-02-2002, 04:13 PM
|
#17 |
|
Member (10 bit)
Join Date: Sep 2001
Location: New Zealand
Posts: 921
|
Look what I just got!!!
|
|
|
|
|
11-02-2002, 04:27 PM
|
#18 |
|
Member (5 bit)
Join Date: Nov 2002
Location: Sparks, Nevada
Posts: 18
|
Unless you really need the messenger (which is not related to MSN messenger) you can easily disable it completely go to Run type in services.msc when it pops up go to Messenger right click on it go to Properties and half way down the page you will see a box to either put it in Automatic or manual or disable. Choose your poison and click ok. You can turn it back on any time just reboot after you disable it to complete the process. You can disable alot of process here that Microsoft believes that are needed to run your system and save some Ram in the process. But that is a whole nother Thread.
|
|
|
|
|
11-02-2002, 04:59 PM
|
#19 |
|
Member (10 bit)
Join Date: Sep 2001
Location: New Zealand
Posts: 921
|
thanks sierrawolf, wont be getting anymore of those popups.
|
|
|
|
|
11-03-2002, 07:17 AM
|
#20 |
|
Member (12 bit)
Join Date: Feb 2001
Location: UK
Posts: 2,469
|
Disabled it and am now waiting eagerly for the fix...
Jim |
|
|
|
|
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
Linear Mode
