How Are Ads Running On My Computer?

Discussion in 'Computer Support' started by Linda, Jun 14, 2004.

  1. Linda

    Linda Guest

    I can't work out where popup ads are coming from. I've run Housecall, NAV,
    Ad-aware, Spybot & have Zonealarm running (plus NAV & XP firewalls).
    Although I'm logged on all I've done in the last few hours is to kill the
    popups & send this post. Apart from that my computer is at Google's homepage
    & I haven't been doing anything. I can use a Popup killer of course but that
    doesn't explain how the ads are occuring.
    I have obviously inadvertently downloaded something that is generating them
    but how can I find it when all that stuff that I've already run doesn't find
    anything?
     
    Linda, Jun 14, 2004
    #1
    1. Advertisements

  2. Linda

    Linda Guest

    p.s. they are all casino type ads.
     
    Linda, Jun 14, 2004
    #2
    1. Advertisements

  3. Linda

    °Mike° Guest

    I'm guessing that these are Messenger pop-ups.
    You should block ports 137-139 (NETBIOS) in your
    firewall, as these are the ports that the Messenger
    service uses.

    To prevent Windows Messenger Service from starting
    automatically, open the Services panel by typing...

    services.msc /s

    ....into the Start / Run box.
    In the right-hand pane highlight 'Messenger'.
    Right click and choose 'Properties'.
    Click the 'Stop' button.
    From the 'Startup Type' drop down, choose 'Disabled' or 'Manual'.
    'Apply / Ok'.

    More information:

    Messenger Service Window That Contains an Internet
    Advertisement Appears
    http://support.microsoft.com/default.aspx?kbid=330904

    Windows Messages
    http://www.jmu.edu/computing/security/info/winmsg.shtml

    How to stop Messenger SPAM Disable Windows Messenger
    Service
    http://www.auburn.edu/oit/security/messengerService.html

    How to Prevent Windows Messenger from Running on a Windows
    XP-Based Computer
    http://support.microsoft.com/default.aspx?kbid=302089

    Stopping Advertisements with Messenger Service Titles
    http://www.microsoft.com/windowsxp/pro/using/howto/communicate/stopspam.asp

    Disable-Remove Windows Messenger
    http://www.dougknox.com/xp/utils/xp_mess_disable.htm

    Shoot The Messenger
    http://grc.com/stm/ShootTheMessenger.htm
     
    °Mike°, Jun 14, 2004
    #3
  4. Linda

    Duane Arnold Guest

    The messenger service listens on port 135 and some other dynamically chosen
    port in the range starting at 1024. That second port will be slightly
    different for each machine. While that port is typically around the valid
    1040, it can be virtually any port. Ports starting at 10000 have been seen.

    Duane :)
     
    Duane Arnold, Jun 14, 2004
    #4
  5. Linda

    Plato Guest

    Plato, Jun 14, 2004
    #5
  6. Linda

    °Mike° Guest

    The Messenger Service uses NETBIOS to communicate.
    The listening ports are irrelevant.
     
    °Mike°, Jun 14, 2004
    #6
  7. Linda

    Duane Arnold Guest

    One can block port 135 as well and leave 137-139 and 445 as is not blocked
    and the messages will not make it.

    So I don't now how some machine on the Internet that's using the Messenger
    Service is getting to unprotected machines is doing it with the Messenger
    service not listening on port 135. That's to my understanding

    The link down at the bottom talks about the ports including port 135.

    http://support.microsoft.com/default.aspx?scid=kb;[ln];330904

    Duane :)
     
    Duane Arnold, Jun 14, 2004
    #7
  8. Linda

    Linda Guest

    ty, ty & ty.

     
    Linda, Jun 14, 2004
    #8
  9. Linda

    °Mike° Guest

    All that is necessary is to block NETBIOS (137-139) broadcasts,
    period.

    <snip>
     
    °Mike°, Jun 15, 2004
    #9
  10. Linda

    °Mike° Guest

    You're welcome.


    <snip>
     
    °Mike°, Jun 15, 2004
    #10
  11. Linda

    Duane Arnold Guest

    We'll agree to disagree and leave it at that. :)

    Duane :)
     
    Duane Arnold, Jun 15, 2004
    #11
  12. Linda

    °Mike° Guest

    TINW.
     
    °Mike°, Jun 15, 2004
    #12
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.