Amiga.org

The "Not Quite Amiga but still computer related category" => Alternative Operating Systems => Topic started by: Blomberg on October 24, 2002, 06:08:03 PM

Title: ARGH! Help!
Post by: Blomberg on October 24, 2002, 06:08:03 PM
What is this? (http://hjem.get2net.dk/doomski/ARGH!.jpg) And how do I get rid of it?

I'm talking about the 'Messenger' box in the middle of the picture in case anyone didn't get that.
Title: Re: ARGH! Help!
Post by: Kronos on October 24, 2002, 06:15:01 PM
Now thats easy:

FORMAT C:

 :-P  :-P  :-P
Title: Re: ARGH! Help!
Post by: whabang on October 24, 2002, 06:15:47 PM
Try running AdAware (http://www.lavasoftusa.com/).
Usually gets rid of most such crap...
Title: Re: ARGH! Help!
Post by: Elektro on October 24, 2002, 06:16:12 PM
looks like microsoft messenger or something like that you should be able to uninstall it

http://www.google.com/search?q=tjenesten%20messenger&sourceid=mozilla-search&start=0&start=0&ie=utf-8&oe=utf-8
Title: Re: ARGH! Help!
Post by: Ilwrath on October 24, 2002, 06:18:22 PM
Hahaha!  (Sorry...  I just find these amusing!)

Ok, now, to remove them, simply switch operating systems.  ;-)  For example, Amiga, Linux, and MacOS don't suffer anything like this.

That's probably impractical, though....

What it is is a very dispicible new form of spam, which is delivered to you by NetBIOS and Microsoft's Windows Messaging Service.  

Wired (http://www.wired.com/news/technology/0,1282,55795,00.html) has an article all about it.

Your best solution to removing them (and locking down your box!) is a good firewall software.  Might I recommend Zone Alarm, from Zone Labs (http://www.zonelabs.com/).

They have a free (for personal use) firewall that is one of the best for Windows.  

Really, these alert boxes are the least of your worries, with all the security problems Windows has.  Get yourself a good firewall.  You won't regret it.
Title: Re: ARGH! Help!
Post by: whabang on October 24, 2002, 06:20:49 PM
OK, perhaps AdAware wasn't the best choise, then...

On the other hand, it's there to remove Spyware... :lol: :lol: :lol:
Title: Re: ARGH! Help!
Post by: on October 24, 2002, 06:33:21 PM
Wow. Now that's a security hole.

If you wanna see real intrusion though, wait till the porn companies get their hands on that software.  :-o :shocked: :lol:
Title: Re: ARGH! Help!
Post by: Blomberg on October 24, 2002, 06:35:21 PM
Yea, har har har, really funny intil it happens to you!! :-x

@ Ilwrath

Thank you for that article, that was a good constructive answer to a genuine concern (of mine).
So, would it be enough to disable the desktop messenger? I can't be arsed to install a bloody software firewall again, it's hell! May have to get a router, then.

@ Elektro

This has nothing to do with MSN Messenger

@ Whabang

Yes, it's about time I run AdAware again, though I don't think it can help me in this case

@ Blahblahchangeoperatingsystemgetanamigablahblah

Ok, then GIVE ME A FRIGGING AMIGAONE ALREADY!!
Title: Re: ARGH! Help!
Post by: Elektro on October 24, 2002, 06:39:20 PM
Well if it's netbios you can turn it off in tcp/ip settings

what does tjenesten mean?
Title: Re: ARGH! Help!
Post by: Blomberg on October 24, 2002, 06:42:11 PM
Quote
Well if it's netbios you can turn it off in tcp/ip settings
How?

Quote
what does tjenesten mean?
It means 'The Service' as in Windows 2000's 'Services'
Title: Re: ARGH! Help!
Post by: olegil on October 24, 2002, 06:43:14 PM
By accessing the tcp/ip settings and turning netbios off  :-P
Title: Re: ARGH! Help!
Post by: Elektro on October 24, 2002, 06:46:18 PM
"Microsoft's Windows Messaging Service."

or

"msn messenger"

all the same schitt  :-P
Title: Re: ARGH! Help!
Post by: Blomberg on October 24, 2002, 06:56:05 PM
I have now disabled the Services:
Messenger
and
TCP/IP NetBIOS Helper Service

Will this do the trick?
What does NetBIOS do, besides spam me?

Quote

Elektro wrote:
"Microsoft's Windows Messaging Service."

or

"msn messenger"

all the same schitt  :-P
Erm ... no
Windows Messenger service is a 'service' for adminstrators to send administrative messages to other users on a computer or local network (I think).
Msn Messenger is a program you use to chat with your friends (like ICQ)
Title: Re: ARGH! Help!
Post by: Ilwrath on October 24, 2002, 07:28:56 PM
Quote

I have now disabled the Services:
Messenger
and
TCP/IP NetBIOS Helper Service

Will this do the trick?
What does NetBIOS do, besides spam me?
 


Hmm... I *think* that should do the trick, but I'm not sure.  I'm much better at building (corporate level) firewalls than securing individual boxes.  If you page through your TCP/IP settings, make sure you do NOT have "Enable NetBIOS over TCP/IP" checked, and if you can check your "bindings", make sure that Windows Networking or File and Printer Sharing are NOT bound to TCP/IP, either.  For standard browsing and FTP, IRC, etc, you don't actually need ANYTHING bound to TCP/IP (which seems counter-intuitive, but it's the truth)

NetBIOS itself is part of Microsoft's networking setup.  As I understand it, it's the stuff that lets the OS enable File/Printer sharing, automatic computer locating/naming on LAN/WAN, and some other functionality, including messaging.  It contains the sharing that SAMBA connects to, plus more stuff.
Not a great technical explaination, but Microsoft never quite gives you the whole story, and you have to kind fill in the blanks on your own.

Quote
Windows Messenger service is a 'service' for adminstrators to send administrative messages to other users on a computer or local network (I think).


Correct you are on this.  And it is quite different from MSN messenger.  

The security risk, is that if someone can get to your NetBIOS enough to send messages, they can also get into your file and printer sharing, and lord knows how many other security holes.  Pop-Up messages are annoying, but not nearly as annoying as if someone steals (copies) a private data file, or deletes a key file windows needs.  Both of which are trivial, if you have that level of access to a remote machine...  Be careful.  Firewalls can be a pain, but they're a lot less painful than the alternative.  Ok, I'm done preaching, now.
Title: Re: ARGH! Help!
Post by: Elektro on October 24, 2002, 09:18:38 PM
Bah what do i care! hah!

 :lol:
Title: Re: ARGH! Help!
Post by: The_Editor on October 24, 2002, 09:32:31 PM
Kronos Said .. and I

Quote
FORMAT C:


Much better to Fdisk .. If your gonna f.uck it f.uck it proper !!  ( Low level format on IDE anyone)
Title: Re: ARGH! Help!
Post by: seer on October 24, 2002, 09:38:14 PM
There's some good info to be found on google when you search for netBIOS.. The name implies what it does, BIOS for networking;

netBIOS "facts" (http://cable-dsl.home.att.net/netbios.htm)

turn off netBIOS (http://cable-dsl.home.att.net/index.htm#CaseB)

Tho; handle with care, if in doubt, don't follow these instructions and get a firewall.. There are plenty to choose from, even free ones (like mentioned ZoneAlarm is real good, as good as the ones you must pay for)...
Title: Re: ARGH! Help!
Post by: hnl_dk on October 24, 2002, 09:38:36 PM
Hejsa Blomberg

Har du haft prøvet at trykke "Ctrl Alt Delete", så kan du jo muligvis se hvilket program der kom med beskeden, hvorefter du kan søge efter programmet i registreringsdatabasen ;-)

And now for the rest:

Press "Ctrl Alt Delete" --> see which program gives you the message --> Find it in the registrationdatabase --> Kill it ;-)
Title: Re: ARGH! Help!
Post by: Seehund on October 24, 2002, 10:00:28 PM
Disable the Windows messenger service, You should also disable NetBIOS, and preferrably block UDP port 135 and TCP 137 + 139 (use Windows' firewall thingy if you haven't got a real one). If you've got a Windows/SMB network then that will break from doing the latter, but you shouldn't have that on an interface to the Internet anyway - but as we know even "professional" Windows versions like NT/XP come with absolutely everything enabled out of the box.

There was some hullabaloo on Slashdot over this recently, but their so-called search function is even more broken than usual, so I can't find it now.

Google comes up with e.g. these (http://members.tripod.com/Craig_West/security.htm) instructions on how to disable messaging.
Title: Re: ARGH! Help!
Post by: Seehund on October 24, 2002, 10:05:49 PM
Quote

hnl_dk wrote:

Press "Ctrl Alt Delete" --> see which program gives you the message --> Find it in the registrationdatabase --> Kill it ;-)


Since messenger is a (dis-)service (daemon for the *nix folks, or tjeneste for you Danes ;) ), I don't think it'll show up in the task manager, well, apart from the actual message window process. Even if it did, it'd still need to be shut down, never to be started again.