Guys I need your help. I have zonealarm pro and in the log file I have thousands of messenger attempts to connect to the internet . I tried everything i can think of from tools option from the application itself to disabling the service in msservice .nothing worked .the damn thing is still using my connection all the time .
Would any body know how can i stop it?
thanks for your help.
Delete, or if you want to be safe rename, the Messenger folder in I believe Program Files folder. That worked for me.
are you referring to a pop up type window ad that is using windows messaging?
You CAN'T stop people from trying to attack you (apart from going over to their house and breaking their computer).
The attacks get to your firewall, and stop. They dont actually get inside your computer. So there's nothing you can do to stop the person from sending them.
That's why DOS attacks are so powerful. Nothing you can do.
Contra, he says that Messenger is trying to connect to the internet, it's coming from his computer. A worm of some sort?
windows/msn messenger or the messenger service?
if it's windows/msn messenger, just remove it if you don't. if it's the messenge service, disabling it should stop it.
First of all thanks for the quick reply. you guys are great.
I included a screen shot of ZA lof file.
Its actually tring to connect to the internet that is (outgoing connection)
One thing that I noticed I keep ending the process thru task manager but it comes right back up after maybe 20 or 30 seconds.
here is a bigger viewzonealarm shot
Are you running an Anti-Virus or run a Adware or Spyware seeking software? Messenger I don't think should be trying to make an outbound. To me it sounds like a virus of some sort. Or can just be paranoid.
yeah, run an adware scanner and an av scanner.
also, check your task manager and see if msmsgs.exe is running (that would be msn messenger). if that's not, then it's clearly (as i'm thinking) the messenger service (called services.exe).
go to run > services.msc and find "messenger" and stop it, then disable it.
Yep sounds like the messenger service
as dreamz said...
go to run > services.msc and find "messenger" and stop it, then disable it.
Thank you guys for all the help. I did all what you suggested but nothing happens.
messenger still start itself again and again and again...... :rant: :rant: :rant:
@dreamz you are right in task manager it says msmsgs.exe and I made sure that messenger is disabled in services in case it was the culprit but :dunno:
whoa whoa, msmsgs.exe is not the same as messenger. if you're using windows/msn messenger, that's fine, that has nothing to do with it. let's just get this straight. windows/msn messenger is the im chat client. messenger is the network message service. if you've disabled the messenger service by going to services.msc, i doubt there's any way the service could start itself. if you really have disabled it, something is starting the messenger service.
Originally posted by dreamz@Nov 6 2003, 04:19 AMwhoa whoa, msmsgs.exe is not the same as messenger. if you're using windows/msn messenger, that's fine, that has nothing to do with it. let's just get this straight. windows/msn messenger is the im chat client. messenger is the network message service. if you've disabled the messenger service by going to services.msc, i doubt there's any way the service could start itself. if you really have disabled it, something is starting the messenger service.
But then, if you've disabled it, it shouldn't be able to start anyway...
Originally posted by Stevie BM@Nov 6 2003, 02:47 AMBut then, if you've disabled it, it shouldn't be able to start anyway...
Yes that's right. If a service status is set to 'Disabled' it prevents any and all applications from starting the service. If it was set to 'Manual', then it's possible that an application may be starting the service.
dreamz> The messenger service is NOT called services.exe. Services.exe is a necessary part of ths OS that let you get out on the internet for example. Disable the messenger service a you will still have services.exe running... :smartass:
yeah, so i don't know why it should keep starting.
and it is called services.exe. that's the process name. if you take a look at black viper's configuration, you'll see the different process names and what they do: http://www.blackviper.com/WinXP/servicecfg.htm
there are several processes known as services.exe. 
OK... just to clear a few things up...
The Windows Messenger service is:
C:\WINDOWS\System32\svchost.exe -k netsvcs, NOT Services.exe
Black Vipers page is wrong.
In the task manager you will see multiple instances of SVCHOST.EXE.
This is the process that runs most of the core OS services.
"Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start."
Open the services mmc panel and DISABLE the service called "Messenger".
When it is set to disabled, it cannot be started.
MSN Messenger 6.x is msnmsgr.exe
All previous versions are msmsgs.exe
To keep this from running, just rename the exe to msnmsgr1.exe/msmsgs1.exe or something like it.
Do not change the extension as windows file protection will put it back.
Don't know why or how, but I've had it happen many times before.
That way if you want to use it later, you can rename it back.
Or you can just uninstall the program.
Certain web sites, including MSN will attempt to start the MSN Messenger client whenever you hit the page or log into .NET Passport account.
Sneaky bastards!!!
Guys I found out the culprit. I Hope I am right. Its the unknown version of msn. I noticed when you uncheck "Automatically run messenger when i log in to windows" under tools>option the next option get checked automatically and greyed out so that you wont be able to be uncheked.
oh, i did not know bv's site was wrong. thanks for pointing that out rjohnstone.
but it seems we were talking about different things this whole time. tarik is talking about windows/msn messenger.
if you want to disable windows messenger, try these:
http://www.updatexp.com/disable-messenger-msn.html
to prevent from loading with oe: http://www.fjsmjs.com/OE/disabmes.htm
to disable windows messenger: http://www.petri.co.il/disable_windows_messenger.htm
http://www.kellys-korner-xp.com/xp_messenger.htm
also, if you don't care for it, you can remove it complete by finding sysoc.inf (you might need to show protected files), and remove the word "hide" from that line that begins with msmsgs (the messenger client). then go to the add/remove panel and you'll be able to remove windows messenger (it might be under windows components).
Easy enough to fix...
Open regedit
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
And delete the line that starts MSMSGS.EXE or MSNMSGR.EXE
Kill the process, rename the exe and your all set.
Aqua-Soft Forums