Popup virust alert

  • Thread starter Thread starter mmjmm
  • Start date Start date
M

mmjmm

For the last couple of days I have been getting a popup window as
follows:

Messenger Service
Message from VIRUSALERT to HOMEUSER on 8/4/2004 10:35:31 AM
Suspicious activity has been reported from your computer!
This due to a virus or spyware installed on your computer.
This virus can destroy important files on your computer.
Most virus scanners are unable to detect the virus!
It is recommended that you visit

:WWW.WINFIX.COM

Is this real or a trick to get me to visit the site mentioned? I
connected to internet for the first time in months with this computer
2 or 3 days ago and the message has been popping up ever since. I have
Spybot (updated) running on this machine and I scanned it with
PC-Cillin 2004 (also updated) from my main computer. I have AVG
running on the affected computer. W2k is running on the machine.

When I close the popup I get another one:

Messenger Service

Microsoft Security Bulletin M503-043

Buffer Overrun in Messrenger Service Could Allow Code Execution
(828035)

Affected Software:

Microsoft Windows NT Workstation
Microsoft Windows Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003

Non Affected Software

Microsoft Windows Millennium Edition

Your system is affected, download the patch from the address below !
FIRST TYPE THE ADDRESS BELOW INTO YOUR INTERNET BROWSER, THEN CLICK
'OK' .
THE ADDRESS WILL DISAPPEAR ONCE YOU HIT OK.

www.patchwindows.org



Thanks
Mike
 
from the wonderful said:
For the last couple of days I have been getting a popup window as
follows:

Messenger Service
Message from VIRUSALERT to HOMEUSER on 8/4/2004 10:35:31 AM
Suspicious activity has been reported from your computer!
This due to a virus or spyware installed on your computer.
This virus can destroy important files on your computer.
Most virus scanners are unable to detect the virus!
It is recommended that you visit

:WWW.WINFIX.COM

Is this real or a trick to get me to visit the site mentioned? I
connected to internet for the first time in months with this computer
2 or 3 days ago and the message has been popping up ever since. I have
Spybot (updated) running on this machine and I scanned it with
PC-Cillin 2004 (also updated) from my main computer. I have AVG
running on the affected computer. W2k is running on the machine.

When I close the popup I get another one:

Messenger Service

Microsoft Security Bulletin M503-043

Buffer Overrun in Messrenger Service Could Allow Code Execution
(828035)

Affected Software:

Microsoft Windows NT Workstation
Microsoft Windows Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003

Non Affected Software

Microsoft Windows Millennium Edition

Your system is affected, download the patch from the address below !
FIRST TYPE THE ADDRESS BELOW INTO YOUR INTERNET BROWSER, THEN CLICK
'OK' .
THE ADDRESS WILL DISAPPEAR ONCE YOU HIT OK.
Click to expand...

1) Google (groups.google.com, www.google.com) is your friend. Search for
previous replies.

2) There are numerous ways of stopping messenger spam .. pick one and
use it. if you are getting it then you either don't have a firewall, or
it isn't configured correctly.

3) NEVER install 'patches' other than by visiting the real MS patch site
(preferably use auto update).
 
go to www.grc.com and download and run "Shoot the Messenger".

Yes your right this is an attempt to get you to visit the sites mentioned.

Gerry
 
For the last couple of days I have been getting a popup window as
follows:

Messenger Service
Message from VIRUSALERT to HOMEUSER on 8/4/2004 10:35:31 AM
Suspicious activity has been reported from your computer!
Click to expand...
<snip>

You must do two things:

Disable Messenger Service:
http://www.itc.virginia.edu/desktop/docs/messagepopup/

Install a software firewall- several freeware firewalls are available to
choose from. Consider this one:
http://smb.sygate.com/products/spf_standard.htm

The fact that you are receiving Messenger Service spam indicates that your
system really *IS* vulnerable, but don't rely on spammers to fix it for
you.
 
I have ZoneAlarm, Ad-Aware 6, and Spybot 1.3 running on this computer.
Scans with Adaware and Spybot found plenty of tracking cookies etc.
but haven't stopped this

Mike
 
I have ZoneAlarm, Ad-Aware 6, and Spybot 1.3 running on this computer.
Scans with Adaware and Spybot found plenty of tracking cookies etc.
but haven't stopped this
Click to expand...

How could they if you allow these cookies to be set. Use a /real/
browser and have full control over cookies.
 
Back
Top