Help - spyware or something

[SuperBLUE]

---------

****How can I find out**** what causes messages like this:

Network Connections
"You (or a program) have requested information from smtp.maybugs.com.
Which connection do you want to use?"

After I press the "Cancel" button message reapears with changed
smtp.maybugs.com to www.maybugs.com, then ftp.maybugs.com, and so on and it
is driveing me crazy. Is there a log file for this?

----------
Another problem:
I keep getting MSN messanger advertising messeges. I have stopped the
service, but it doesn´t work. Can someone tell me what is the best way to
remove this program.

---------

Thanks

[Tx2]

In article <cdlljs$ek2$1@fegnews.vip.hr>, superblueMAKNI@vip.hr, a.k.a
SuperBLUE says...

Another problem: I keep getting MSN messanger advertising messeges. I have stopped the service, but it doesn?t work. Can someone tell me what is the best way to remove this program.


The windows messenger service, and MSN Messenger are *not* the same
thing.

Google for "remove messenger" to remove the 'built-in' version of
messenger or if indeed you have the MSN Messenger installed (something
again slightly different) then simply use ADD/REMOVE PROGRAMS.

[*Vanguard*]

"SuperBLUE" <superblueMAKNI@vip.hr>
wrote in news:cdlljs$ek2$1@fegnews.vip.hr: --------- ****How can I find out**** what causes messages like this: Network Connections "You (or a program) have requested information from smtp.maybugs.com. Which connection do you want to use?" After I press the "Cancel" button message reapears with changed smtp.maybugs.com to www.maybugs.com, then ftp.maybugs.com, and so on and it is driveing me crazy. Is there a log file for this? ---------- Another problem: I keep getting MSN messanger advertising messeges. I have stopped the service, but it doesn´t work. Can someone tell me what is the best way to remove this program. --------- Thanks

The first problem sounds like a popup from a personal software firewall.
Got one? If so, check its logs. The popup didn't give any decent info
on what program was trying to make the covert connection?

Since you suspect a virus, trojan, or other malware, and since you are
posting in a anti-virus newsgroup, it is odd that you never mentioned
running a full scan using a recently updated anti-virus program, or
checking for spyware by using Ad-Aware, Spybot Search & Destroy, and
CWShredder.

The second problem is NOT caused by someone using 'net send' to use the
Messenger service. If that NT service is disabled and not started then
it cannot be used. Sounds like the real problem is with the MSN
Messenger prattleware which has nothing to do with the Messenger NT
service. There isn't an entry in Add/Remove Programs to uninstall MSN
Messenger?

Also, I do not see how these problems relate to the newsgroups to which
you posted. What do covert Internet connections and popups have to do
with comp.software.extreme-programming and with the hacker newsgroups?
The fact that you even post to the hacker groups makes your post
suspicious. Hacking isn't necessarily bad but it obviously doesn't
relate to your post.

[daaf]

Tx2 wrote:
In article <cdlljs$ek2$1@fegnews.vip.hr>, superblueMAKNI@vip.hr, a.k.a SuperBLUE says...Another problem:I keep getting MSN messanger advertising messeges. I have stopped theservice, but it doesn?t work. Can someone tell me what is the best way toremove this program. The windows messenger service, and MSN Messenger are *not* the same thing. Google for "remove messenger" to remove the 'built-in' version of messenger or if indeed you have the MSN Messenger installed (something again slightly different) then simply use ADD/REMOVE PROGRAMS.
or go ;http://www.tweakxp.com/
a eazy way to remove windows messenger is to be found there...

[SuperBLUE]

Also, I do not see how these problems relate to the newsgroups to which you posted. What do covert Internet connections and popups have to do with comp.software.extreme-programming and with the hacker newsgroups?

Probably becouse some hacker has made an extreme program that fucked up my
peaceful computer.
AdAware does not cope with these attacks from the messanger. Norton AV is
even more useless.
The fact that you even post to the hacker groups makes your post suspicious. Hacking isn't necessarily bad but it obviously doesn't relate to your post.

Why do you think that most hackers are suspicious? I allways wanted to
become a hacker.

[*Vanguard*]

"SuperBLUE" <superblueMAKNI@vip.hr>
wrote in news:cdm9l7$gve$1@fegnews.vip.hr: Also, I do not see how these problems relate to the newsgroups to which you posted. What do covert Internet connections and popups have to do with comp.software.extreme-programming and with the hacker newsgroups? Probably becouse some hacker has made an extreme program that fucked up my peaceful computer. AdAware does not cope with these attacks from the messanger. Norton AV is even more useless.

If you don't have one, there are freebie firewall programs available.
It wasn't clear from your post if the "Network Connection" prompt was a
popup from an existing firewall, some port monitoring utility, or an
unexpected prompt from a process you haven't identified yet (but then
malware would not be popping up warning dialogs alerting you to the
connection so it sure seems that you are running some firewall or
monitoring program to present the prompt).
The fact that you even post to the hacker groups makes your post suspicious. Hacking isn't necessarily bad but it obviously doesn't relate to your post. Why do you think that most hackers are suspicious? I allways wanted to become a hacker.

How to monitor your network traffic and determine which process is
opening a socket or how to uninstall program doesn't, to me, seem to be
hacker activities. Figuring out how to thwart NTFS permissions (and it
is doable) is more of what I figure is hacker stuff.

Start practicing now to be a hacker. You need to be willing to
experiment, research, and persist. How might you find some info on
uninstalling MSN Messenger? Well, I took a guess and entered
messenger.microsoft.com and found a web site for it. I then clicked the
link for Help and another that took me to
http://support.microsoft.com/default.aspx?ID=FH;rid;WinMsgr. Clicked on
the "Step-by-Step Instructions and How-To Articles" link. Nothing
popped out as appropriate. So I went to http://support.microsoft.com,
Advanched search, selected MSN Messenger, and searched on "uninstall".
Nothing. Redid the search with "remove". Still nothing solid.
Research often hits dead ends.

I don't have MSN Messenger so I cannot check, but an obvious first place
to look is in the Add/Remove Programs applet. Your lack to respond that
"it's not there" means it isn't there under the presumption that you
actually looked. So I Google searched on "+MSN +Messenger +uninstall"
and the first article found was
http://sniptools.com/vault/uninstall-and-remove-msn-messenger.htm. My
guess is that there is a section titled "BLC.remove" in the msmsgs.inf
file that delineates what files get removed and maybe some entries to
unregister from the registry. It also has a link to a Microsoft KB
article but note that is for Windows Messenger whereas you asked about
MSN Messenger. The 2nd match in the Google search was to
http://www.mvps.org/marksxp/WindowsXP/messenger/messenger.php which
gives some info on the differences between MSN Messenger and Windows
Messenger.

--
__________________________________________________
*** Post replies to newsgroup. Share with others.
(E-mail: domain = ".com", add "=NEWS=" to Subject)
__________________________________________________

[kyralea]

SuperBLUE wrote: --------- ****How can I find out**** what causes messages like this: Network Connections "You (or a program) have requested information from smtp.maybugs.com. Which connection do you want to use?" After I press the "Cancel" button message reapears with changed smtp.maybugs.com to www.maybugs.com, then ftp.maybugs.com, and so on and it is driveing me crazy. Is there a log file for this? ---------- Another problem: I keep getting MSN messanger advertising messeges. I have stopped the service, but it doesn´t work. Can someone tell me what is the best way to remove this program. --------- Thanks
Are you talking about a grey error looking box? if DOS comand NETSEND to
post a message on other windows boxes on a network - and sincethe
internet is a network...) you can disable Windows messenger service is
Administrator Tools in XP and 2000 in Control Panel / Administrator
Tools /Services and then "disable" or set to manual (starting manually)
Windows MEssenger service .This is totally seperate for MSN Messenger
for Windows and will not affect IMs and messages on MSN Messenger.

Some companies use the idea of the NETSEND command to send messager for
spamming and advertising because 2k and XP have windows messenger
enabled by default

--
- kyra

http://www.aleeya.net
Curiosity SKILLED this cat ;)

Don't you wish humans were RFC compliant?

chmod a+x /bin/laden: Allows anyone the permission to execute /bin/laden.

[John Roth]

"SuperBLUE" <superblueMAKNI@vip.hr> wrote in message
news:cdlljs$ek2$1@fegnews.vip.hr... --------- ****How can I find out**** what causes messages like this: Network Connections "You (or a program) have requested information from smtp.maybugs.com. Which connection do you want to use?" After I press the "Cancel" button message reapears with changed smtp.maybugs.com to www.maybugs.com, then ftp.maybugs.com, and so on and
it is driveing me crazy. Is there a log file for this? ---------- Another problem: I keep getting MSN messanger advertising messeges. I have stopped the service, but it doesn´t work. Can someone tell me what is the best way to remove this program.

Please take comp.software.extremeprogramming out of your
newsgroup list. This newsgroup deals with a project management
and software development methodology called extreme
programming, and has nothing to do with any specific
applications, operating systems or languages (other than
some few classes of development tools.)

John Roth --------- Thanks

[Leonard Agoado]

"SuperBLUE" <superblueMAKNI@vip.hr> wrote in message
news:cdm9l7$gve$1@fegnews.vip.hr... Also, I do not see how these problems relate to the
newsgroups to which you posted. What do covert Internet connections and popups
have to do with comp.software.extreme-programming and with the hacker
newsgroups?
Probably becouse some hacker has made an extreme program that
fucked up my peaceful computer.

Here, I'll start you off with a clue:

Extreme Programming
http://www.extremeprogramming.org/

AdAware does not cope with these attacks from the messanger.
Norton AV is even more useless.
The fact that you even post to the hacker groups makes your
post suspicious. Hacking isn't necessarily bad but it obviously
doesn't relate to your post.
Why do you think that most hackers are suspicious? I allways
wanted to become a hacker.

Here's a place to start:

Hacking
http://www.perrets.com/st_prod.html?p_prodid=204&p_catid=11


Finally, here's something to keep you busy until eighth
grade starts in September:
http://www.ymca.net/programs/Programs.htm


Len Agoado
agoado@msn.com

[Dr Wakk]

whooopeeee "JOHN ROTH"!!
do not attempt to reply to inquiries that you have no interest in viewing.
instead, pay attention to your own shit not to others' shit. thank you ever
so much...............

"John Roth" <newsgroups@jhrothjr.com> wrote in message
news:10ftqmaeuqrui21@news.supernews.com... "SuperBLUE" <superblueMAKNI@vip.hr> wrote in message news:cdlljs$ek2$1@fegnews.vip.hr... --------- ****How can I find out**** what causes messages like this: Network Connections "You (or a program) have requested information from smtp.maybugs.com. Which connection do you want to use?" After I press the "Cancel" button message reapears with changed smtp.maybugs.com to www.maybugs.com, then ftp.maybugs.com, and so on and it is driveing me crazy. Is there a log file for this? ---------- Another problem: I keep getting MSN messanger advertising messeges. I have stopped the service, but it doesn´t work. Can someone tell me what is the best way
to remove this program. Please take comp.software.extremeprogramming out of your newsgroup list. This newsgroup deals with a project management and software development methodology called extreme programming, and has nothing to do with any specific applications, operating systems or languages (other than some few classes of development tools.) John Roth --------- Thanks

[SuperBLUE]

> Please take comp.software.extremeprogramming out of your newsgroup list. This newsgroup deals with a project management and software development methodology called extreme programming, and has nothing to do with any specific applications, operating systems or languages (other than some few classes of development tools.) John Roth

I was just presuming i would get some help from a groop with such a cool
name.

[david_liteman]

"SuperBLUE" <superblueMAKNI@vip.hr> wrote in message news:<cdntci$ocm$1@fegnews.vip.hr>... Please take comp.software.extremeprogramming out of your newsgroup list. This newsgroup deals with a project management and software development methodology called extreme programming, and has nothing to do with any specific applications, operating systems or languages (other than some few classes of development tools.) John Roth I was just presuming i would get some help from a groop with such a cool name.

I BET IFUCKING KNOW WHERE YOUR PROBLEM IS. GO INTO MY COMPUTER AND GO
INTO TOOLS FOLDER OPTIONS,VIEW,CLISK THE SHOW HIDDEN FILES ,CLICK SHOW
SYSTEM FOLDER,UNCLICK BOT THE HIDE KNOWN FILE EXTENSIONS AND UNCLICK
OP SYS FILES(IGNORE THE POP-UP WARNING).NOW GO TO C:\DOCUMENTS AND
SETTINGS\'YOUR NAME'\LOCAL SETTINGS\TEMP AND SCROLL DOWN TO THE END OF
THE PAGE WHERE SOME BUG FILE IS FUCKING AROND (ITS PRROBABLY JUST A
FEW KILOBITS IN SIZE)RENAME THE FILE TO SOMETHING.DOC .
nOW YOU TWAT GO INTO INTERNET EXPLORER PROPERTIES AND GO INTO
SECURITYSETTINGS AND SELECT MEDIUM.yEH NO MORE HIDDEN SHIT LOADING
ONTO YOUR COMPUTER WHEN YOU VISIT PORN SITES(WHICH IS HOW THIS GOT
ONTO YOUR COMPUTER-DON'T LIE, WE KNOW)
IF THIS DOESN'T WORK CHOOSE THE OPTIONS BELOW.
go to download.com and get every malware checking program and then run
them all.then download a few hundred firewalls(u can never have too
many).

[SuperBLUE]

> I BET IFUCKING KNOW WHERE YOUR PROBLEM IS. GO INTO MY COMPUTER AND GO INTO TOOLS FOLDER OPTIONS,VIEW,CLISK THE SHOW HIDDEN FILES ,CLICK SHOW SYSTEM FOLDER,UNCLICK BOT THE HIDE KNOWN FILE EXTENSIONS AND UNCLICK OP SYS FILES(IGNORE THE POP-UP WARNING).NOW GO TO C:\DOCUMENTS AND SETTINGS\'YOUR NAME'\LOCAL SETTINGS\TEMP AND SCROLL DOWN TO THE END OF THE PAGE WHERE SOME BUG FILE IS FUCKING AROND (ITS PRROBABLY JUST A FEW KILOBITS IN SIZE)RENAME THE FILE TO SOMETHING.DOC . nOW YOU TWAT GO INTO INTERNET EXPLORER PROPERTIES AND GO INTO SECURITYSETTINGS AND SELECT MEDIUM.yEH NO MORE HIDDEN SHIT LOADING ONTO YOUR COMPUTER WHEN YOU VISIT PORN SITES(WHICH IS HOW THIS GOT ONTO YOUR COMPUTER-DON'T LIE, WE KNOW) IF THIS DOESN'T WORK CHOOSE THE OPTIONS BELOW. go to download.com and get every malware checking program and then run them all.then download a few hundred firewalls(u can never have too many).

Yuo are hurting my eyes :(((

[SuperBLUE]

> AdAware does not cope with these attacks from the messanger. Norton AV is even more useless.
Sorry, Ad-aware turned out to be very useful -38 things found and killed
this time.
Trojan guarder discoverd 3-4 trojans and one or two for each time i
connected on the internet.

[*Vanguard*]

"SuperBLUE" <superblueMAKNI@vip.hr>
wrote in news:cduphc$b1q$1@fegnews.vip.hr:
<< <lot of shouting by david>
Yuo are hurting my eyes :(((

That's why the Del key is so helpful in OE.