Pissed of with Windows Messenger pop ups ?

**Raptor** · 4th August 2003

Windows NT, 2000, and XP hide an hidden Internet server that is running by default. It receives and accepts, among other things, unsolicited network messages that cause pop-up dialog boxes to appear on the desktop. Internet Spammers have discovered this and are spraying pop-up Spam across the Internet. The Windows Messenger server should never have been running by default, and Microsoft has finally fixed that in Windows 2003, but users of previous Windows need to take responsibility for this themselves.

Simply use the app - Shoot The Messenger

http://grc.com/files/shootthemessenger.exe

**Raptor** · 4th August 2003

lots more useful stuff here

http://grc.com/freepopular.htm

**Aido** · 4th August 2003

If you stick a firewall on that will do the same thing dude except at a much lower level - it also means that the script kiddies can't attempt null session hacks on your NBT connection over the net to get all your files... Not that I've ever done that of course

**-AMO-** · 4th August 2003

Not sure if this is for all OS' but to disable messenger service on Win XP, go to:

Control Panel > Administrative Tools > Services

Then scroll down to messenger, double click it and change the startup type to disabled.

**drdude** · 5th August 2003

Originally posted by -AMO-
Not sure if this is for all OS' but to disable messenger service on Win XP, go to:

Control Panel > Administrative Tools > Services

Then scroll down to messenger, double click it and change the startup type to disabled.

works for win2k as well, most probably win2k3 server

**cujo2000** · 5th August 2003

Aido...So thats what happened to my machine last week..totally wiped 2 HD's even though i was running firewall and AV protection and i had one of these pop up messages saying summat like "HAHAHA we have been in your system"...how can you stop this crap...???

**Raptor** · 5th August 2003

or just use the app - it does it in a second

we all know how to do it manually - but thats what "tweeking" tools are for no ?

so we dont have to

**jjatlas** · 5th August 2003

thanks rap, those messages really get on my nerves.

**dingle_666** · 5th August 2003

it is disabled by default on my windows 2003 enterprise edition

**Pegasus** · 5th August 2003

Disabling the messenger service still does not alter the fact that ports 135 - 139 are still wide open to the outside world, best advice is what Aido recommends and configure it properly.

**Gel** · 5th August 2003

Excellent stuff Raptor.

Can anyone get my bloddy scanner to work though.

It's an agfa e50.
Everytime I go to use it it says it's having an 'I/O error'
The thing is a USB scanner and when I start my machine the scanner does a self test, windows shows it as being there etc. Just the poxy thing won't work when I ask it to.

**Aido** · 5th August 2003

Can we do a proof of concept - if you're getting these messages send me your ip and I'll take a look at your machines to see if I can get on them easily or not...

Shit I'll even do a basic penetration test if you like