Author Topic: 'Messenger service' virus on my computer  (Read 1615 times)

SpookyPistolero

  • friend
  • Member
  • ***
  • Posts: 366
'Messenger service' virus on my computer
« on: December 12, 2005, 09:53:08 PM »
Any computer-savy folks know if there is a particular virus or program that causes tons of pop-ups on the computer to come up just labeled 'Messenger Service'?

It made to look like a standard microsoft pop-up but isn't at all. Threatening system failure if you don't go to 'www.regfixit.com', critical errors, etc.

I have run a couple of free spyware programs and they never found the source, apparently, because I still get these things. If I never shut down my computer (just let it hibernate when i'm not using it) then they will eventually go away if I keep deleting them, but they are persistent. If it ever gets shut down completely after this point, they come right back.

Any simple (hopefully free?) solutions around?
"She could not have reached this white serenity except as the sum of all the colors, of all the violence she had known." - The Fountainhead
"Smoke your pipe and be silent; there's only wind and smoke in the world"  - Irish Proverb

Sindawe

  • friend
  • Senior Member
  • ***
  • Posts: 2,938
  • Vashneesht
'Messenger service' virus on my computer
« Reply #1 on: December 12, 2005, 10:04:34 PM »
http://elamb.blogharbor.com/hacked/messagefromsystemalert.htm

The above could be the culprit.  Unless you're in a network that needs to use the messenger service (as in scripts that use netsend to alert admins to problems), turn off the messenger service and block it at the firewall.

You usually need to run several anti spyware packages to keep a system clean.  My suite currently inclused AdAware, Spybot (both free versions) and paid copies of SpySweeper and XoftSpy.
I am free, no matter what rules surround me. If I find them tolerable, I tolerate them; if I find them too obnoxious, I break them. I am free because I know that I alone am morally responsible for everything I do.

Fatcat

  • New Member
  • Posts: 32
'Messenger service' virus on my computer
« Reply #2 on: December 12, 2005, 10:07:09 PM »
Start -> Run -> "services.msc"

Scroll down the list that appears til you find one named Messenger.. double click on it.

In the box that appears there will be a selection called Startup type.. use the pulldown list to change it to disabled. Hit ok, maybe restart, and you shouldn't have the problem anymore.

You might wanna hit windows update too.
"The greatest mistake you can make in life is to be continually fearing you will make one."

SpookyPistolero

  • friend
  • Member
  • ***
  • Posts: 366
'Messenger service' virus on my computer
« Reply #3 on: December 13, 2005, 01:29:05 AM »
Totally Rad, thanks a lot. Sucks being a computer 'tard. I turned off the messenger as per the instructions. So does that cure the symptom of the popup and leave the 'online log reader' or is it dead all together?
"She could not have reached this white serenity except as the sum of all the colors, of all the violence she had known." - The Fountainhead
"Smoke your pipe and be silent; there's only wind and smoke in the world"  - Irish Proverb

Guest

  • Guest
'Messenger service' virus on my computer
« Reply #4 on: December 13, 2005, 04:13:13 AM »
Related:

When XPPro first came out, I was given the following to remove and negate problems with the pesky Messenger.
This worked for me and others.  I admit, I am not - have not studied this area so if someone will take a look , advise and let me know if this is still appplicable I would appreciate it.  I still pass this onto to folks and need to know.

---
Quote
Who wants a super easy way to remove MSN Messanger from XP?
I just upgraded to XP Pro on my laptop and I could not remove the annoying MSN Messanger program since it is run through so many other programs (i.e. the dreaded "Sharing Violation"). Here is a super easy way to disable and remove this very annoying and intrusive program for good from XP.

Simply cut the command line below and paste it into your run dialog box and it will be gone. I have used this repeatedly and it works everytime. I tried other solutions to no avail. So here it is:

------------- CUT BELOW ---------------

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

-------------STOP CUT ----------------

Dave Markowitz

  • friend
  • Member
  • ***
  • Posts: 137
    • http://blogostuff.blogspot.com/
'Messenger service' virus on my computer
« Reply #5 on: December 13, 2005, 08:31:10 AM »
MSN Messenger is not the same things as the Windows Messenger Service.  MSN Messenger is an instant messaging client used for chat over the Internet.  The Windows Messenger Service is used for sending pop-up messages across a LAN, but has been exploited as a way to send spam pop-ups.

IIRC, installing XP SP2 disables the WMS by default.

Calumus

  • friend
  • Senior Member
  • ***
  • Posts: 1,207
'Messenger service' virus on my computer
« Reply #6 on: January 01, 2006, 06:58:09 PM »
Service pack 1 actually changed it to disabled by default. If you want to make sure its deactivated go to start>run> type "msconfig" without the quotes. at the far right you'll see a tab for startup. Look for a box for windows messenger and make sure its unchecked. While you're there you might as well uncheck a couple of more programs that don't need to start at boot up. All they do is slow you down and sap system resources. Quicktime, office, winamp, things like that. If you don't recognise it, don't touch it, or google it to see if its nesessary to have it start up with the computer. I've had clients who had 30 or 40 programs starting with every time they booted up, and just unchecking some little boxes cut their load time in half. After you restart the computer a box will come up talking about using selective start up or something along those lines. Uncheck the box that says "show this screen each time I boot up" then hit OK.  Cheers,
Shawn

bermbuster

  • friend
  • Member
  • ***
  • Posts: 168
'Messenger service' virus on my computer
« Reply #7 on: January 02, 2006, 03:01:56 AM »
Quote from: Calumus
Service pack 1 actually changed it to disabled by default. If you want to make sure its deactivated go to start>run> type "msconfig" without the quotes. at the far right you'll see a tab for startup. Look for a box for windows messenger and make sure its unchecked. While you're there you might as well uncheck a couple of more programs that don't need to start at boot up. All they do is slow you down and sap system resources. Quicktime, office, winamp, things like that. If you don't recognise it, don't touch it, or google it to see if its nesessary to have it start up with the computer. I've had clients who had 30 or 40 programs starting with every time they booted up, and just unchecking some little boxes cut their load time in half. After you restart the computer a box will come up talking about using selective start up or something along those lines. Uncheck the box that says "show this screen each time I boot up" then hit OK.  Cheers,
Shawn
Here's a site where you can find out what those things are that are running on your machine.

http://www.answersthatwork.com/Tasklist_pages/tasklist.htm