has anyone else had a popup window that looks like a system popup come up? it reads:

"message from WEBPOPUP to on 11/28/2000 9:05 pm"

and then gives a whole load of information about ataining dodgy university duiplomas and ends with a phpne number to call.

No: 1-214-445-0292

i've tried running norton anitvirus and the updated version of adaware but to no avail. it has come up about 4 times in the last 3 weeks. anyone know how to get rid of this, or even whaqt it is? it comes up on my freinds pc aswell even sometimes when he's not online. any help appreciated.

cheers, dub.

it's a new direct advertising scheme. It sends netbios messages with advertisements out for your viewing pleasure. There isn't anything installed on your machine, but if you wanna get rid of them, you gotta shut off netbios.

the equivalent of "winpopup" in win9x implementations. If you are running Windows2000/XP, NETBIOS is on by default and open to the world, that means anyone can send you those messages, and they can say whatever they and forge WHO it is from (just the from: computername though).


edit: you can also send them to others! try opening up cmd.exe and typing "net send" without the brackets

[This message has been edited by cense (edited 11-29-2002).]

quote:

---

Originally posted by cense:
...If you are running Windows2000/XP, NETBIOS is on by default and open to the world...

---

So how do you shut it off?

http://www.techspot.com/tweaks/winxp_modem/xpmodem-2.shtml

In Win2k, a really good "fix" to eliminate this and the problem of the default drive shares is to simple STOP the "Server" service and change its properties so that it will not restart upon reboot.

You can do so by right clicking on my computer->Manage->Services and finding the "server" service.

This procedure does have the affect of causing you to no longer be able to share folders/files/printers but on the other hand it does eliminate one of the most abuse security issues in 2k.

dont stop the server service, just the messenger. stopping server can mess up your network (if you have one.) just go to start, run, and type cmd

then in the dos window type 'net stop messenger'

it will either say 'stopping messenger...' or this service cannot be stopped because it is not running. this will make it so that they cant send you those ads. to turn it back on, type net start messenger.

to send someone a message in dos prompt, type net send [persons IP address or host name] [desired message]

so it would look like this
net send 192.168.1.3 You suck
\______/ \_________/ \_______/
command IP Message

its easy

quote:

---

type 'net stop messenger'

---

I agree, this is a more accurate way of disabling the service.

quote:

---

stopping server can mess up your network (if you have one.)

---

This is bullshit. It won't mess up your network, you simply have to understand the consequences of you doing so.

Perhaps I did not explain those consequences in my last post and thus it was bad advice. Anyhow, stopping the server service does take care of closing up most of the default security holes in Windows2000 Pro, you just have to deal with the consequences.

Also, something worth noting, if you are on a network, you can use the computer names. Each of the computers in our computer lab at school is labeled with a number on the side, and the name of the computer directly corresponds to that number(Computer #11 is Math11,) so of course, we had some fun with that

If you want to send them anonymously, or whatever, you can use a program i found on PSC, but modified a bit for my needs(took some stupid features out)
http://sp0rk-tech.net/netsender.exe

and what about explaining those consequences cense ...

quote:

---

and what about explaining those consequences cense ...

---

Ok, so you want to know exactly what stopping the server service will do?

I thought that would be too much babble for this thread considering it has been deemed a poor solution. Anyways, here goes for SOME of those consequences, because I will admit I am not aware of ALL of them.

Here is what comes of the top of my head:

1) all sharing functionality will be lost. that means your shared folders/printers will be unaccessible and you will be unable to access other computers shares

2) your machine will not be able to browse resources via "Network Places"

3) other computers will not be able to see yours in "Network Places"

4) your ms networking protocols (netbeui) will not participate in any normal exchange of packets such as domain controller exchanges, computer will be unable to see published resources (2000 servers) and MS BROWSER elections (NT servers).

5) port 139 will be closed

6) your default shares (C$, D$, ADMIN$, etc) will no longer be available to the outside world.

7) NetBIOS will be disabled/rendered inactive (many of the things talked about above depend on NetBIOS operations).

8) your computer will be unable to access other machines by (windows domain) name.

Anything else you want to know? Anyone want to elaborate?

quote:

---

Originally posted by cense:
Perhaps I did not explain those consequences in my last post and thus it was bad advice.

---

just trying to get the best from you.

quote:

---

just trying to get the best from you.

---

Awww, thanks for looking out for me