Anyone Else Getting Popups?

Mike AI · 02-09-2003

http://fightpopups.com/

I keep getting messages.... is this from me dialing up on AOL? Or is it ICQ that is doing this...

Can it be stopped?

RawAlex · 02-09-2003

Mike, that only works on systems that are not behind a firewall - that is an "admin" message system, from what I can gather:

http://www.analogduck.com/blog/modules/new....php?storyid=56

More techie type info is here:

http://mynetwatchman.com/kb/security/artic...pam/netsend.htm

For those who want to profit from this, I guess... :-)

Seriously, these types of popups are a sure sign of an unprotected system - get yourself a firewall (either software or hardware) to get rid of this problem - don't buy software just to fix this problem, do something to fix your security for real.

Alex

RawAlex · 02-09-2003

The actual product sending the messages is:

http://www.directadvertiser.com/

Not expensive ($700) but I am not sure that there isn't some sort of hacking / cracking / network trespass involved in this.

Any ideas?

Alex

Mutt · 02-10-2003

Twice i've had somebody do that to my computer. Getting those spam ads
in Windows message boxes outta nowhere. LBBV showed me how to get rid of them.

now i see a whole bunch of companies pushing this new form of marketing.

sucks.

slavdogg · 02-10-2003

i have a firewall and still get them Alex

slavdogg · 02-10-2003

i cant see these ads being effective in anyway if one cant click on them.

Sword · 02-10-2003

I have never received one of those ads yet but I've read some about them. I had no idea they aren't clickable though. That would seem to make them almost pointless.

The only way I could see it being very effective, would be to pop a message like:
"WARNING: Your system has been compromised. Type www.blahblah.com into your browser immediately to fix this."

Have an all in one firewall/evidence eraser type thing for sale at that site.

But for porn sites. I can't imagine too many people typing in a porn URL from one of those. Not like it's real tough to find free porn these days. :P

RawAlex · 02-10-2003

If your firewall is not set to block port 135, they will get through, from what I could find. Certain firewall products don't block all ports...

I think that a pop-up blocker or anti-virus type program would do okay with this, simple domains (type in style, easy ones) might do okay... but most people would not want to waste a good domain on being a "drop" page...

So I am not sure of a use yet. But it sure does get people's attention, I bet, and you have to click ok to get rid of it, which means 100% attention.

Alex

slavdogg · 02-10-2003

Quote:

Originally posted by RawAlex@Feb 10 2003, 01:07 AM
But it sure does get people's attention, I bet, and you have to click ok to get rid of it, which means 100% attention.

Alex, clicking ENTER kills them
which means they get ZERO attention

RawAlex · 02-10-2003

Yeah, but there is some action required to make them go away, which means they get the screen for at least a second or two... and if the user is online but not at the computer, it is the first thing they will see when the come back.

If things were clickable, then they would have something! :-)

Alex

sextoyking · 02-10-2003

Hi,

Just 1 or 2 things in Windows xp to change, and they won't come back anymore.

I hear the clickable ones are already being tested

Petr · 02-10-2003

All you need to do is to disable "Messenger" service in WIN. Here is how:
http://www.its.caltech.edu/its/security/us...messenger.shtml

Winetalk.com · 02-10-2003

Quote:

Originally posted by Petr@Feb 10 2003, 06:09 AM
All you need to do is to disable "Messenger" service in WIN. Here is how:
http://www.its.caltech.edu/its/security/us...messenger.shtml

I did that anbd get rid of the pest

Mike AI · 02-10-2003

Thanks Petr!!

Ed sent me this in e-mail, its he same thing:

Michael - yes, this is an "XP-ism" - but you don't need expensive software to "turn off" the
leak that lets douchebags exploit the feature and spam you... Its very simple to turn off
yourself. It totally slipped my mind when I was setting up the laptop (trying to do several
things at once and all), but I can give you the steps...

1. Click your "Start" button on your toolbar at the bottom of your screen, and select your
"Control Panel".
2. Select "Performance and Maintenance" and then select "Administrative Tools". If you
are using the "Classic" mode for contol panel, just click the "Administrative Tools" icon.
3. Click on "Services" in the list of Tools. When the applet opens, scroll down until you
find an entry for "Messenger". Right-click it with your mouse and select properties.
Change the "Startup Type" to "DISABLED" then click "OK".
4. That's it - close any other windows that may be open. You shouldn't have to reboot,
but it won't hurt if you did...

Edd

02-09-2003	#1
Mike AI Administrator Want to see your own Advertising Here! Join Date: Oct 2002 Posts: 11,618	http://fightpopups.com/ I keep getting messages.... is this from me dialing up on AOL? Or is it ICQ that is doing this... Can it be stopped? __________________ Make big money on your Domains! Why wait 40 days to get paid with the other guys? Parked.com pays the most for your traffic, and cuts checks twice a month!

02-09-2003	#2
RawAlex Members $100 for every ImLive sign-up Join Date: Oct 2002 Posts: 4,036	Mike, that only works on systems that are not behind a firewall - that is an "admin" message system, from what I can gather: http://www.analogduck.com/blog/modules/new....php?storyid=56 More techie type info is here: http://mynetwatchman.com/kb/security/artic...pam/netsend.htm For those who want to profit from this, I guess... :-) Seriously, these types of popups are a sure sign of an unprotected system - get yourself a firewall (either software or hardware) to get rid of this problem - don't buy software just to fix this problem, do something to fix your security for real. Alex __________________ Let's go to the edge of disaster Push the pedal and go a little faster Let's slam into a wall at ramming speed Let's go to the edge of a mountain Jump off and lets start countin' Hit the ground and tell me if it bleeds

02-09-2003	#3
RawAlex Members $100 for every ImLive sign-up Join Date: Oct 2002 Posts: 4,036	The actual product sending the messages is: http://www.directadvertiser.com/ Not expensive ($700) but I am not sure that there isn't some sort of hacking / cracking / network trespass involved in this. Any ideas? Alex __________________ Let's go to the edge of disaster Push the pedal and go a little faster Let's slam into a wall at ramming speed Let's go to the edge of a mountain Jump off and lets start countin' Hit the ground and tell me if it bleeds

02-10-2003	#8
RawAlex Members $100 for every ImLive sign-up Join Date: Oct 2002 Posts: 4,036	If your firewall is not set to block port 135, they will get through, from what I could find. Certain firewall products don't block all ports... I think that a pop-up blocker or anti-virus type program would do okay with this, simple domains (type in style, easy ones) might do okay... but most people would not want to waste a good domain on being a "drop" page... So I am not sure of a use yet. But it sure does get people's attention, I bet, and you have to click ok to get rid of it, which means 100% attention. Alex __________________ Let's go to the edge of disaster Push the pedal and go a little faster Let's slam into a wall at ramming speed Let's go to the edge of a mountain Jump off and lets start countin' Hit the ground and tell me if it bleeds

02-10-2003	#10
RawAlex Members $100 for every ImLive sign-up Join Date: Oct 2002 Posts: 4,036	Yeah, but there is some action required to make them go away, which means they get the screen for at least a second or two... and if the user is online but not at the computer, it is the first thing they will see when the come back. If things were clickable, then they would have something! :-) Alex __________________ Let's go to the edge of disaster Push the pedal and go a little faster Let's slam into a wall at ramming speed Let's go to the edge of a mountain Jump off and lets start countin' Hit the ground and tell me if it bleeds

02-10-2003	#4
Mutt Members Join Date: Oct 2002 Posts: 1,087	Twice i've had somebody do that to my computer. Getting those spam ads in Windows message boxes outta nowhere. LBBV showed me how to get rid of them. now i see a whole bunch of companies pushing this new form of marketing. sucks.

02-10-2003	#7
Sword Members Join Date: Oct 2002 Posts: 208	I have never received one of those ads yet but I've read some about them. I had no idea they aren't clickable though. That would seem to make them almost pointless. The only way I could see it being very effective, would be to pop a message like: "WARNING: Your system has been compromised. Type www.blahblah.com into your browser immediately to fix this." Have an all in one firewall/evidence eraser type thing for sale at that site. But for porn sites. I can't imagine too many people typing in a porn URL from one of those. Not like it's real tough to find free porn these days. :P

02-10-2003	#11
sextoyking 3 1/2 More Years... Join Date: Oct 2002 Location: Portland, OR. Posts: 1,523	Hi, Just 1 or 2 things in Windows xp to change, and they won't come back anymore. I hear the clickable ones are already being tested __________________ Huge Online Design Portfolio at Webinc.com http://www.webinc.com -------------------------------------- 50% Commissions on All Sales! http://www.wishing.com/money

02-10-2003	#12
Petr Members Join Date: Nov 2002 Posts: 49	All you need to do is to disable "Messenger" service in WIN. Here is how: http://www.its.caltech.edu/its/security/us...messenger.shtml