Windows Messenger pop-up ads assaulting Windows users; Macintosh unaffected

“Before Walter Pomerleau could surf the Web recently, he had to fight a new kind of pop-up ad sweeping across the Internet,” Byron Acohido reports for USA TODAY. “The retired Massachusetts State Police major had to cancel 30 pop-up text boxes, each one directing him to Web pages to buy products and services. Later, as Pomerleau tried to compose e-mail, he had to delete 15 more pop-up boxes that kept superimposing in front of his e-mail. ‘They were more than annoying,’ he says. ‘They drove me crazy.’ Pomerleau fell victim to advertisers who are increasingly taking advantage of a feature, Windows messenger service, built into PCs using the Microsoft Windows 2000 and XP operating systems. This includes all Windows PCs sold in the past two years.”

Acohido explains that the Windows “feature” was intended to allow network administrators to broadcast text alerts via pop-up boxes to groups of computer users in a corporate setting. But, hackers discovered this “feature” will also accept pop-up boxes broadcast across the Internet. This means that advertisers can insert product pitches into such boxes and broadcast them to any Web-connected Windows XP or 2000 personal computer.

“‘It has gotten to the point where the home PC user has to battle for control of his PC,’ says Jeremiah Grossman, president of WhiteHat Security… Microsoft views pop-up boxes as a benign nuisance that does ‘not pose a security risk,’ says Greg Sullivan, product manager for Windows. Advertisers are unable to ‘execute code or do anything malicious,’ Sullivan says. ‘It does nothing to compromise your system other than cause an interruption,'” Acohido reports.

Macintosh users are unaffected.

Full article here.

29 Comments

  1. It is not a security risk, so we won’t do anything about it. In fact we have been thinking about imposing a $0.0001 per pop up charge to the advetisers. This way we can make money on the feature we prepared so that we can slowly brain wash our consumers.
    If this in fact was a security risk you would know by the loud sound of Redmond nailing down the hatches and the mass of airdropped flyers proclaiming that any security risk is due to the computer user and not the manufacturer of the operating system.

    – Press Release from Redmond tomorrow

  2. The Beast is arrogant and calls its users dumb and stupid: it is alwasy the fault of the silly user. Windows users sing a cappella “TRUE, TRUE, the Dumbests of all Love you Micros**t”

  3. Chomper: Micros**t rep sais it is not a security threat hence it will stay. It is up to the user to stop it but – again – Micros**t believe its users are the dumbest of all hence they will never be able to stop it entirely which pleases advertisers a lot.

  4. http://www.spychecker.com/program/messengerutil.html

    Shoot The Messenger is a very simple tool that helps you get rid of annoying IP based Messenger popup ads (the ones that use the Windows NT/2000/XP Messenger service). These popups are unlike regular popups, since they abuse the Messenger Service, which is intended to send text messages across a network, using the computer`s IP address. They can appear as dialog box on your desktop if you have the Messenger Service enabled and are not using a firewall.

    Shoot The Messenger will display the current status of the Messenger Service and allows you to turn it off/on with a simple click, without having to go into the Windows configurations panel. The program does not need to be running after the service has been turned on or off. It can also be used from the commandline. Very simple to use too.

  5. To: “here’s the easy fix”

    Patch away! Daily, at this point, it seems. I have better things to do. Owning a computer is not a contest with myself to see if I can keep it running well. I have a Mac. Your solution? Once again, not as easy as a Mac. Will the other 90% ever awaken? Or have they started to do so already?

  6. You can always use a firewall (hardware or software) and block port 135 — that will stop the majority of these things. My firewall blocks a couple hundred of these a day, so I can imagine how annoying this must be to these poor PC users.

    If you want to block them ALL, block all outside access to ports 1025-1029 as well.

  7. Hi Fred. I have both PCs and Macs. I run 3DS Max software that is proprietary to the PC. I have invested large sums of time and money over the last decade on this software to become proficient at it that I will not just set it on the shelf and start fresh with Maya, etc. for the Mac. Most of us use PCs on a daily basis and are not affected by these snafoos that crop up like this article is discussing. Rather than complain and loose large amounts of time worrying about these types of things, I find the solution, apply it, and am back to working like before. No problem.

    But I understand your reply. You are a Mac user. I am a Mac and PC user. Yes I use both so I really have to “Think Different”. I use my Mac to edit in Final Cut Pro and I use DVD Studio Pro to transfer my work to DVD. Why? Well because I have not found anything to match the Mac as far as video and DVD creation. But, I will not give up my PCs either. Why? Well because I appreciate the speed of the PC for creating 3D work. I feel comfortable using the PC for this. This article discusses more of the casual user but do not forget many people utilize their PC for work and I make a good living from both machines. But, I could not do it from just one machine, I need both. If one requires me to take 5 minutes to apply a patch to correct something, patch applied and on I go working.

    Guess Apple’s recall of the latest OSX 10.2.8 upgrade just doesn’t get the attention it deserves. Oh yes, let’s not forget, Apple snafoos too.

    It really depends on how you approach things like this in life. Either you can sit around and muddle about it or find the solution. Deal with what life throws at you logically and get on with what you got to do. Period.

    That’s my solution.

  8. Here’s the easy fix,
    I understand your need for both platforms but it is not even in the same ballpark to say that Apple has snaffoos too when compared to Micros0ft. We have sat back and watched Windose users patch, patch, reinstall, etc. while we have had one problem in how long? Being a Mac user feels good…

  9. “I pity the poor Wintel drones. I wonder how much more suffering will it take for them to see the light?”

    A lot more. People do have a high treshold of suffering if 1. they have lots of companies and/or 2. if they don’t have to spend more money to buy better systems (i.e. piece of junks are acceptable if they are perceived to be very cheap). Both 1 and 2 applies to wintel crap.

  10. I CAN SEE A GREAT APPLE AD
    Two people are at a Starbucks kind of Wi-Fi coffee bar with laptops in tow. They are working on a project and need to research it on the ‘net. One has a PowerBook and the other a high-end Wintel folding desktop (what they call a laptop). Well you can guess the rest:
    Apple Safari XP Explorer
    No Popups MASSIVE POPUPS
    BUILT IN GOOGLE SEARCH NOPE
    TABBED BROWSING NOPE
    iDisk Bookmarks Actually Yes (,Mac Utilities)
    Sherlock No Way
    Watson Noooooooo!
    You get the idea.

  11. Easy fix, pulling an unneeded upgrade is not even on the same planet as not even being able to successfully patch a critical defect in a production OS on millions of computers. Please.

    By the way, as I type this today, I’m running 10.2.8 and loving it. Works great on my TiBook. Of course, Apple pulled it because it wasn’t perfect. Now that’s a word that has probably never been uttered in Redmond.

  12. Same here 10.2.8 and only one problem: battery time is incorrect.
    There are quirks on some configurations, Apparently it even depends on where your unit was built in the first place.

    Concerning the use of Windows from professionals. Sure, you manage to make it work, to avoid troubles, protect and fine tuning.
    The problem is exactly that: if you do not fine tune it and take care of what should have been taken care of from Microsoft you end up with a virus trap which causes problem to all networked systems.

    I have colleagues who work fine with XP BUT what they do for that is not even in the mind of the rest 95% of Windows users.
    So it does not surprise me that a professional can make something out of it – we are way above the knowledge required to make it work, but the majority of users are way below that threshold.

  13. Virus
    Crash
    Patch
    Virus
    Crash
    Patch
    Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad…
    Virus
    Crash
    Patch
    Virus
    Crash
    Patch
    Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad…
    Virus
    Crash
    Patch
    Virus
    Crash
    Patch
    Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad… Pop-up Ad…

    “Insanity: Doing the same thing and expecting different results.”

  14. 10.2.8 works great here too. This winblows ‘feature’ is going to be fun dealing with at work on Monday, at least I have the weekend to remind myself of what computing should be like!

  15. If M$ had posted a revision to it’s OS with a major (major meaning beyond the normal built in crappiness) flaw in it, it would have left it up to the user fins find a solution. Apple pulls it from circulation. If there are smaller problems, it quickly posts another update the remedies the situation. There was an update of OS X 10.1, I forget the iteration, which I downloaded ans installed. Afterwords, I noticed that I was having a minor glitch with the dial up internet funtion in the Menu bar. My cursor would disappear when dialing up. I was a bit disappointed, but I was willing to just live with it. Not even a month later, Apple posted another update that fixed the problem. They (Apple) didn’t just throw up thier hands and say, “Ahh, just a minor problem, they can live with it.”

    Bottom line:

    Apple: Fixed problem in a short time.

    M$: Let them eat cake.

  16. Short history lesson:

    1780’s:

    Marie Antoinette, Queen of France, is told that her people have not bread to eat and are starving.

    Queen replies, “Let them eat cake.”

    Shortly afterwords: FRENCH REVOLUTION.

    Could this be the beggining of the end of M$ as we know it? We can only hope.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.