How Are Ads Running On My Computer?

Discussion in 'Computer Support' started by Linda, Jun 14, 2004.

  1. Linda

    Linda Guest

    I can't work out where popup ads are coming from. I've run Housecall, NAV,
    Ad-aware, Spybot & have Zonealarm running (plus NAV & XP firewalls).
    Although I'm logged on all I've done in the last few hours is to kill the
    popups & send this post. Apart from that my computer is at Google's homepage
    & I haven't been doing anything. I can use a Popup killer of course but that
    doesn't explain how the ads are occuring.
    I have obviously inadvertently downloaded something that is generating them
    but how can I find it when all that stuff that I've already run doesn't find
    anything?
     
    Linda, Jun 14, 2004
    #1
    1. Advertising

  2. Linda

    Linda Guest

    p.s. they are all casino type ads.

    "Linda" <> wrote in message
    news:7Kazc.23883$...
    > I can't work out where popup ads are coming from. I've run Housecall, NAV,
    > Ad-aware, Spybot & have Zonealarm running (plus NAV & XP firewalls).
    > Although I'm logged on all I've done in the last few hours is to kill the
    > popups & send this post. Apart from that my computer is at Google's

    homepage
    > & I haven't been doing anything. I can use a Popup killer of course but

    that
    > doesn't explain how the ads are occuring.
    > I have obviously inadvertently downloaded something that is generating

    them
    > but how can I find it when all that stuff that I've already run doesn't

    find
    > anything?
    >
    >
     
    Linda, Jun 14, 2004
    #2
    1. Advertising

  3. Linda

    °Mike° Guest

    I'm guessing that these are Messenger pop-ups.
    You should block ports 137-139 (NETBIOS) in your
    firewall, as these are the ports that the Messenger
    service uses.

    To prevent Windows Messenger Service from starting
    automatically, open the Services panel by typing...

    services.msc /s

    ....into the Start / Run box.
    In the right-hand pane highlight 'Messenger'.
    Right click and choose 'Properties'.
    Click the 'Stop' button.
    From the 'Startup Type' drop down, choose 'Disabled' or 'Manual'.
    'Apply / Ok'.

    More information:

    Messenger Service Window That Contains an Internet
    Advertisement Appears
    http://support.microsoft.com/default.aspx?kbid=330904

    Windows Messages
    http://www.jmu.edu/computing/security/info/winmsg.shtml

    How to stop Messenger SPAM Disable Windows Messenger
    Service
    http://www.auburn.edu/oit/security/messengerService.html

    How to Prevent Windows Messenger from Running on a Windows
    XP-Based Computer
    http://support.microsoft.com/default.aspx?kbid=302089

    Stopping Advertisements with Messenger Service Titles
    http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

    Disable-Remove Windows Messenger
    http://www.dougknox.com/xp/utils/xp_mess_disable.htm

    Shoot The Messenger
    http://grc.com/stm/ShootTheMessenger.htm



    On Mon, 14 Jun 2004 05:30:43 GMT, in
    <7Kazc.23883$>
    Linda scrawled:

    >I can't work out where popup ads are coming from. I've run Housecall, NAV,
    >Ad-aware, Spybot & have Zonealarm running (plus NAV & XP firewalls).
    >Although I'm logged on all I've done in the last few hours is to kill the
    >popups & send this post. Apart from that my computer is at Google's homepage
    >& I haven't been doing anything. I can use a Popup killer of course but that
    >doesn't explain how the ads are occuring.
    >I have obviously inadvertently downloaded something that is generating them
    >but how can I find it when all that stuff that I've already run doesn't find
    >anything?
    >


    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Jun 14, 2004
    #3
  4. Linda

    Duane Arnold Guest

    °Mike° <> wrote in
    news::

    > I'm guessing that these are Messenger pop-ups.
    > You should block ports 137-139 (NETBIOS) in your
    > firewall, as these are the ports that the Messenger
    > service uses.
    >


    The messenger service listens on port 135 and some other dynamically chosen
    port in the range starting at 1024. That second port will be slightly
    different for each machine. While that port is typically around the valid
    1040, it can be virtually any port. Ports starting at 10000 have been seen.

    Duane :)
     
    Duane Arnold, Jun 14, 2004
    #4
  5. Linda

    Plato Guest

    Plato, Jun 14, 2004
    #5
  6. Linda

    °Mike° Guest

    On Mon, 14 Jun 2004 05:56:31 GMT, in
    <Xns9508990CE160notmenotmecoml@204.127.204.17>
    Duane Arnold scrawled:

    >°Mike° <> wrote in
    >news::
    >
    >> I'm guessing that these are Messenger pop-ups.
    >> You should block ports 137-139 (NETBIOS) in your
    >> firewall, as these are the ports that the Messenger
    >> service uses.
    >>

    >
    >The messenger service listens on port 135 and some other dynamically chosen
    >port in the range starting at 1024. That second port will be slightly
    >different for each machine. While that port is typically around the valid
    >1040, it can be virtually any port. Ports starting at 10000 have been seen.
    >
    >Duane :)


    The Messenger Service uses NETBIOS to communicate.
    The listening ports are irrelevant.

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Jun 14, 2004
    #6
  7. Linda

    Duane Arnold Guest

    °Mike° <> wrote in
    news::

    > On Mon, 14 Jun 2004 05:56:31 GMT, in
    > <Xns9508990CE160notmenotmecoml@204.127.204.17>
    > Duane Arnold scrawled:
    >
    >>°Mike° <> wrote in
    >>news::
    >>
    >>> I'm guessing that these are Messenger pop-ups.
    >>> You should block ports 137-139 (NETBIOS) in your
    >>> firewall, as these are the ports that the Messenger
    >>> service uses.
    >>>

    >>
    >>The messenger service listens on port 135 and some other dynamically
    >>chosen port in the range starting at 1024. That second port will be
    >>slightly different for each machine. While that port is typically
    >>around the valid 1040, it can be virtually any port. Ports starting at
    >>10000 have been seen.
    >>
    >>Duane :)

    >
    > The Messenger Service uses NETBIOS to communicate.
    > The listening ports are irrelevant.
    >


    One can block port 135 as well and leave 137-139 and 445 as is not blocked
    and the messages will not make it.

    So I don't now how some machine on the Internet that's using the Messenger
    Service is getting to unprotected machines is doing it with the Messenger
    service not listening on port 135. That's to my understanding

    The link down at the bottom talks about the ports including port 135.

    http://support.microsoft.com/default.aspx?scid=kb;[ln];330904

    Duane :)
     
    Duane Arnold, Jun 14, 2004
    #7
  8. Linda

    Linda Guest

    ty, ty & ty.

    "°Mike°" <> wrote in message
    news:...
    > On Mon, 14 Jun 2004 05:56:31 GMT, in
    > <Xns9508990CE160notmenotmecoml@204.127.204.17>
    > Duane Arnold scrawled:
    >
    > >°Mike° <> wrote in
    > >news::
    > >
    > >> I'm guessing that these are Messenger pop-ups.
    > >> You should block ports 137-139 (NETBIOS) in your
    > >> firewall, as these are the ports that the Messenger
    > >> service uses.
    > >>

    > >
    > >The messenger service listens on port 135 and some other dynamically

    chosen
    > >port in the range starting at 1024. That second port will be slightly
    > >different for each machine. While that port is typically around the valid
    > >1040, it can be virtually any port. Ports starting at 10000 have been

    seen.
    > >
    > >Duane :)

    >
    > The Messenger Service uses NETBIOS to communicate.
    > The listening ports are irrelevant.
    >
    > --
    > Basic computer maintenance
    > http://uk.geocities.com/personel44/maintenance.html
     
    Linda, Jun 14, 2004
    #8
  9. Linda

    °Mike° Guest

    On Mon, 14 Jun 2004 22:40:04 GMT, in
    <Xns9508B3B4BDFEDnotmenotmecoml@204.127.204.17>
    Duane Arnold scrawled:

    >°Mike° <> wrote in
    >news::


    <snip>

    >> The Messenger Service uses NETBIOS to communicate.
    >> The listening ports are irrelevant.
    >>

    >
    >One can block port 135 as well and leave 137-139 and 445 as is
    >not blocked and the messages will not make it.


    All that is necessary is to block NETBIOS (137-139) broadcasts,
    period.

    <snip>

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Jun 15, 2004
    #9
  10. Linda

    °Mike° Guest

    You're welcome.


    On Mon, 14 Jun 2004 22:41:28 GMT, in
    <sQpzc.27542$>
    Linda scrawled:

    >ty, ty & ty.
    >
    >"°Mike°" <> wrote in message
    >news:...
    >> On Mon, 14 Jun 2004 05:56:31 GMT, in
    >> <Xns9508990CE160notmenotmecoml@204.127.204.17>
    >> Duane Arnold scrawled:
    >>
    >> >°Mike° <> wrote in
    >> >news::
    >> >
    >> >> I'm guessing that these are Messenger pop-ups.
    >> >> You should block ports 137-139 (NETBIOS) in your
    >> >> firewall, as these are the ports that the Messenger
    >> >> service uses.
    >> >>


    <snip>

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Jun 15, 2004
    #10
  11. Linda

    Duane Arnold Guest

    °Mike° <> wrote in news:40e730ea.11581296
    @localhost.dot.net:

    > On Mon, 14 Jun 2004 22:40:04 GMT, in
    > <Xns9508B3B4BDFEDnotmenotmecoml@204.127.204.17>
    > Duane Arnold scrawled:
    >
    >>°Mike° <> wrote in
    >>news::

    >
    > <snip>
    >
    >>> The Messenger Service uses NETBIOS to communicate.
    >>> The listening ports are irrelevant.
    >>>

    >>
    >>One can block port 135 as well and leave 137-139 and 445 as is
    >>not blocked and the messages will not make it.



    > All that is necessary is to block NETBIOS (137-139) broadcasts,
    > period.
    >


    We'll agree to disagree and leave it at that. :)

    Duane :)
     
    Duane Arnold, Jun 15, 2004
    #11
  12. Linda

    °Mike° Guest

    On Mon, 14 Jun 2004 23:25:55 GMT, in
    <Xns9508BB7A23D83notmenotmecoml@216.148.227.77>
    Duane Arnold scrawled:

    >°Mike° <> wrote in news:40e730ea.11581296
    >@localhost.dot.net:
    >
    >> On Mon, 14 Jun 2004 22:40:04 GMT, in
    >> <Xns9508B3B4BDFEDnotmenotmecoml@204.127.204.17>
    >> Duane Arnold scrawled:
    >>
    >>>°Mike° <> wrote in
    >>>news::

    >>
    >> <snip>
    >>
    >>>> The Messenger Service uses NETBIOS to communicate.
    >>>> The listening ports are irrelevant.
    >>>>
    >>>
    >>>One can block port 135 as well and leave 137-139 and 445 as is
    >>>not blocked and the messages will not make it.

    >
    >
    >> All that is necessary is to block NETBIOS (137-139) broadcasts,
    >> period.
    >>

    >
    >We'll agree to disagree and leave it at that. :)


    TINW.

    --
    Basic computer maintenance
    http://uk.geocities.com/personel44/maintenance.html
     
    °Mike°, Jun 15, 2004
    #12
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Marc
    Replies:
    8
    Views:
    666
  2. wm2004

    Computer Auctions and Classified Ads

    wm2004, Jan 30, 2004, in forum: Computer Information
    Replies:
    2
    Views:
    509
    Tom Dyer
    Feb 1, 2004
  3. amit1017
    Replies:
    1
    Views:
    974
    amit1017
    Oct 18, 2007
  4. audit2

    Running,Running!

    audit2, Feb 1, 2008, in forum: Firefox
    Replies:
    1
    Views:
    475
    Peter Potamus the Purple Hippo
    Feb 1, 2008
  5. richard
    Replies:
    13
    Views:
    659
    Mike Yetto
    Jul 1, 2009
Loading...

Share This Page