Pop-ups

[Mick]

Hi all,
I have been plauged by two pop-ups called "ByeByeAdds.com" &
"EndAdds.com" which pop up onto my screen whilst I'm on-line. I am running
Windows XP & also using MSN. I have used Spybot & addaware but the
problem still remains. Any help would be greatly appreciated.

Regards,
Mick

[Mick]

Hi mto

yes its the later the small box its just a grey 3 by 2 inch box with
www.endads.com
and byebyeads.com please can you give me direction to get tools to kill msn
and once again thanks for help

Mick
"Mick" <micky_croker@REMOVE.hotmail.com> wrote in message
news:binfhp$ddj$1@hercules.btinternet.com...
> Hi all,
> I have been plauged by two pop-ups called "ByeByeAdds.com" &
> "EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
running
> Windows XP & also using MSN. I have used Spybot & addaware but the
> problem still remains. Any help would be greatly appreciated.
>
> Regards,
> Mick
>
>

[Mick]

Hi MTO
Thanks sport that seems to have solved the problem

Mick
"mto" <nobody@dontsendmeanyspam.thanks> wrote in message
news:-Y6cnZ_t1-7kzdKiU-KYvw@seg.net...
>
> "Mick" <micky_croker@REMOVE.hotmail.com> wrote in message
> news:binift$i3a$1@hercules.btinternet.com...
> > Hi mto
> >
> > yes its the later the small box its just a grey 3 by 2 inch box with
> > www.endads.com
> > and byebyeads.com please can you give me direction to get tools to kill
> msn
> > and once again thanks for help
> >
> > Mick
> > "Mick" <micky_croker@REMOVE.hotmail.com> wrote in message
> > news:binfhp$ddj$1@hercules.btinternet.com...
> > > Hi all,
> > > I have been plauged by two pop-ups called "ByeByeAdds.com" &
> > > "EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
> > running
> > > Windows XP & also using MSN. I have used Spybot & addaware but the
> > > problem still remains. Any help would be greatly appreciated.
> > >
> > > Regards,
> > > Mick
>
> I flatly refuse to use ISP's "software" whether Earthlink or MSN so I'm
not
> sure how you can completely get rid of the MSN. You can Shoot The
Messenger
> here -
> http://grc.com/default.htm
>
> (other tools available also)
>
>

[YoKenny]

Mick wrote:
> Hi all,
> I have been plauged by two pop-ups called "ByeByeAdds.com" &
> "EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
> running Windows XP & also using MSN. I have used Spybot & addaware
> but the problem still remains. Any help would be greatly appreciated.

This is similar to an organized crime protection racket. They are in a way
doing you a favour by letting you know that your system is wide open to the
Internet. Turning off Messenger Service is hiding your head in the sand.
Get a firewall like ZoneAlarm or Kerio. While you are at the GRC site
run the ShieldsUp!! tests to see your visibility on the Internet.

[sponge]

On Fri, 29 Aug 2003 12:05:13 +0000 (UTC), "Mick"
<micky_croker@REMOVE.hotmail.com> wrote:

>Hi all,
> I have been plauged by two pop-ups called "ByeByeAdds.com" &
>"EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
running
>Windows XP & also using MSN. I have used Spybot & addaware but the
>problem still remains. Any help would be greatly appreciated.
>
>Regards,
>Mick

I still see a lot of those on my IDS and IPS. This is messenger spam.
www.endads.com and www.byebyeads.com (and, also, www.destroyads.com)
are all the same scam artists. They operate their sites out of India.
I recommend composing an email and emailing it to the following
addresses, preferably with one or two addresses in the To: field and
the rest in the bcc: field.

ip-admin@giasbm01.vsnl.net.in
gpsingh@giasbm01.vsnl.net.in
postmaster@giasbm01.vsnl.net.in
abuse@cogentco.com
security@cogentco.com
noc@cogentco.com

The problem is that vsnl (India's primary internet backbone), is very
slow to act and has been known in the past to be a black hat, meaning
very spam-friendly. Make a note to Cogentco to sever connectivity with
VSNL if VSNL will not take action.

Make sure to include as much information as possible, even a copy of
the text of the spam if you can. A packet dump isn't a bad idea
either.

Sponge
Sponge's Anti-Spyware Source
www.geocities.com/yosponge

[YoKenny]

sponge wrote:
> On Fri, 29 Aug 2003 12:05:13 +0000 (UTC), "Mick"
> <micky_croker@REMOVE.hotmail.com> wrote:
>
>> Hi all,
>> I have been plauged by two pop-ups called "ByeByeAdds.com" &
>> "EndAdds.com" which pop up onto my screen whilst I'm on-line. I am
>> running Windows XP & also using MSN. I have used Spybot &
>> addaware but the problem still remains. Any help would be greatly
>> appreciated.
>>
>> Regards,
>> Mick
>
> I still see a lot of those on my IDS and IPS. This is messenger spam.
> www.endads.com and www.byebyeads.com (and, also, www.destroyads.com)
> are all the same scam artists. They operate their sites out of India.
> I recommend composing an email and emailing it to the following
> addresses, preferably with one or two addresses in the To: field and
> the rest in the bcc: field.
>
> ip-admin@giasbm01.vsnl.net.in
> gpsingh@giasbm01.vsnl.net.in
> postmaster@giasbm01.vsnl.net.in
> abuse@cogentco.com
> security@cogentco.com
> noc@cogentco.com
>
> The problem is that vsnl (India's primary internet backbone), is very
> slow to act and has been known in the past to be a black hat, meaning
> very spam-friendly. Make a note to Cogentco to sever connectivity with
> VSNL if VSNL will not take action.
>
> Make sure to include as much information as possible, even a copy of
> the text of the spam if you can. A packet dump isn't a bad idea
> either.

Don't get your hopes up. Cogentco is just as black hat.
http://www.spamhaus.org/SBL/listings...p=cogentco.com <== notice the
yellow listings
http://www.spamhaus.org/SBL/listings...co.net%20(arin)
http://www.spamhaus.org/SBL/listings...sp=vsnl.net.in

[Jay T. Blocksom]

On Fri, 29 Aug 2003 09:09:09 -0400, in <alt.privacy.spyware>, "mto"
<nobody@dontsendmeanyspam.thanks> wrote:
>
[snip]
>
> I flatly refuse to use ISP's "software" whether Earthlink or MSN so I'm
> not sure how you can completely get rid of the MSN. You can Shoot The
> Messenger here -
> http://grc.com/default.htm
>
> (other tools available also)
>

No "tools" are needed, especially not from that snake-oil salesman. Just
follow the directions you'll find at:

<http://www.itc.virginia.edu/desktop/docs/messagepopup/>

and the symptom will be completly obliterated. Of course, you'll still have
the underlying disease -- a pile of open ports for no good reason -- but
that is also true after fooling yourself with Gibson's idiotic
self-protional rantings.

Do yourself, and the world, a favor... Read and *understand* the
information at <http://www.grcsucks.com/> before misleading any more
innocent bystanders.


--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Jay T. Blocksom]

On Fri, 29 Aug 2003 12:55:25 +0000 (UTC), in <alt.privacy.spyware>, "Mick"
<micky_croker@REMOVE.hotmail.com> wrote:
> Hi mto
>
> yes its the later the small box its just a grey 3 by 2 inch box with
> www.endads.com
> and byebyeads.com
[snip]

Sounds like a Windows Messenger pop-up.

If ANY of the pop-ups appeared while your web browser was *not* open, that
is solid confirmation.

For the time being, follow the instructions you'll find here:

<http://www.itc.virginia.edu/desktop/docs/messagepopup/>

to turn that service OFF.

But please understand, this will cure the symptom, but NOT the "disease",
which is the fact that your computer is sitting there, wide-open and exposed
DIRECTLY to the internet. If it has not already been "r00ted" or "ow3ned",
it will be a minor miracle. (Have you perhaps heard the news reports about
MS.blast and SoBig.F?) You NEED a proper firewall. It is NOT optional.
And by "proper", I mean NOT some pseudo-firewall software running on the
same (still exposed) box it's ostensibly trying to "protect" -- that very
concept is an oxymoron.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -