Micros*ft Messenger

H

Houman

1
Hi Ladies and Germs,

I would like some calculated guesses on how to block MS Messenger (Note: NOT MSN Messenger!!) on my home network. I don't want to stop it loading or remove it, but blocking the ports it uses to get out. I know this pest of an application uses random ports to come in, but need to stop it getting out.

Any ideas is most welcome.

Houman
 
Seb

Seb

1
Maybe shut all ports except 80, 21, 23, 110, 8080
U mite also look into sock 4 & 5. I've got no exp in that bro.
Lets see if netman wanna help u out ;)
 
roadworker

roadworker

1
Block it's internet acces with a software firewall,like Sygate.....you can set it to automaticly blocking for every app that tries to acces the .net without your approval.
 
Seb

Seb

1
For MSN Messenger try blocking messenger.hotmail.com port 1863
For MS Messenger, dyu mean net send? If yes, then u can disable that service in ur services config, Jusr run services.msc if u use winxp/nt/03

Do you really look like ur sig?If so, no wonder the cows :p

[edit]
U mite read these...nxt time use google :p
http://www.spinics.net/lists/security/msg01318.html
http://www.thefab.net/topics/computing_general/cg12_removing_messenger.htm
http://www.freedownloadscenter.com/Utilities/Patches_and_Updates/Startup_Fix_For_MS_Messenger.html
http://www.theregister.co.uk/2002/04/08/the_best_way_to_kill/

 To see what it gives...But best thing is to block www.microsoft.com altogether :p
BGates is such a nut head btw. Need a jackhammer to crack it open. Roady, u up for the job?
 
H

Houman

1
I am using a Netgear H/W Firewall. Would like to keep it that way if I can. I might try one of those S?W ones to see what port Messenger Uses. Its really gettign into my nerves now. Here are the ports I am blocking...
 

Attachments

VIPER_1069

VIPER_1069

1
xp anti spy disables this does it not ?!

:)


from elsewhere
Press the keytabs WIN + [R] simultaniously
in the appearing run line please enter the following command

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

Should work with copy 'n paste also. After pressing ENTER you'll get an error message you can ignore
Click to expand...
 
VIPER_1069

VIPER_1069

1
another tip c/o tech.tv :)

"We all want to uninstall everything Windows doesn't completely need to run optimally. Problem is, some programs you don't want taking up space hide away. They're next to impossible to find, much less remove.

Don't worry, because tonight I have a Windows tweak that'll help you immediately. Yes, we showed you how to do it back in November 2001, but my gut and my inbox tell me I should mention it again.

Navigate to C:\WINDOWS\inf

Open the sysoc.inf file in Notepad or another plain text editor. If you can't find the inf directory, it's probably hidden. Unhide it.

Click Tools and choose Folder Options.
Under View, enable Show Hidden Files & Folders.

In sysoc.inf, look for the section called "components" in XP or "old base components" in 2000. What looks like a bunch of gibberish is actually pretty easy to read. You'll see a component name, followed by an equals sign, followed by a list of parameters separated by commas.

For example: Games=ocgen.dll,OcEntry,games.inf,HIDE,7

The deal: the "HIDE" between the two last commas indicates a hidden component. Remove "HIDE" to unhide the component.

For example: Games=ocgen.dll,OcEntry,games.inf,,7

Unhide any component you want.

Save the file.

Reopen the Windows Component Wizard to see your new Add/Remove options!

Let's see if you can remove Windows Messenger forever. I know you can."
Click to expand...
edit .... why do you not want to remove it HOUMAN ?! :)

posted all this and then re read the thread dohhhhhhhh *smacks head* always read headers twice doh !! :)

anyhow this above tip is pretty useful ;)
 
H

Houman

1
@ Seb - Very Harsh, me thinks ;)
@ LTR - I just tried it and it can still get out :(
@VIPER - Bud, if I removed the app, it will be only a matter of time for it to get re-installed again (win95 clients, no Admin policy). I like to kill the basta*d at its roots (If I can)
 
Seb

Seb

1
Then the only thing u've got left is to lock urself and rip the coaxial cable :p
Trust me, blocking all ports is the only soln...leave open only the 1s u need.
Ask netman...
 
H

Houman

1
@seb. Bud I am glad you are not a Doctor :D I can see your patients try to suicide, just beacuse the have a cold:D

@ Roady - I think I'll take that advice.

Thankyou Champs! (Seb the exterminator excluded :D)

Houman
 
VIPER_1069

VIPER_1069

1
icq block port 5190 or 443

aol you need to block connections to login.oscar.aol.com

msn you need to block port 1863

also this ip 64.4.13.0/24 :)

jabber servers on port 5222 or 443

try that houman :)


you could ALSO edit the hosts file on all the machines to block the download sites for the clients ;)
 
L

LTR12101B

1
The only thing I can think of, is to try a software firewall (rules based, with decent logging), and see if you can trap just what it DOES USE - particularly by using "Deny once" or adding blocking rules, just to see if it then attempts to worm its way round.
 
You must log in or register to reply here.
Top