Microsoft planned to chop Messenger service

[detn8r]

Spam attacks and security vulnerabilities have prompted Microsoft to plan to turn off its troublesome Windows Messenger service in the next Windows XP update, a company representative said Tuesday.

The Messenger service is a data exchange mechanism for networked computers that shouldn't be confused with Microsoft's instant-messaging software. Spammers have taken advantage of the service, which is typically only used to manage networks in businesses, to send advertisements that pop up in gray boxes on people's desktops. Microsoft also announced earlier in October that the technology has a flaw that could be used by attackers to bypass a computer's security.

quote: source: | [u]CNET News[/b]

Switching Messenger off "is the current plan of record," said Neil Charney, director of product management in Microsoft's Windows client group. The company made the announcement at its Professional Developers Conference in Los Angeles. "What we are doing at this point is running through the plan with developers," Charney said.

The next update, Windows XP Service Pack 2, is due in the first half of 2004. Microsoft also plans in Service Pack 2 to turn on the Internet Connection Firewall, a basic form of protection that's built into Windows but is currently off by default.

The decision comes as other companies have attacked Microsoft for including a feature that home PC owners largely don't use and that has been the source of security problems. Network administrators worry that the vulnerability in Messenger could be exploited by an online vandal to create a fast-spreading worm similar to MSBlast or Slammer.

Last week, America Online revealed that it automatically turned off the feature for nearly 15 million of its customers. The drastic step was the latest move to quash the effects of the flaw for AOL, which first started filtering out Messenger data nearly a year ago.

The plan to modify the default setting of Windows XP is part of Microsoft's search for ways to better secure its besieged operating system. At the beginning of October, the software giant said it would educate customers and improve its default configurations and its system for patching software.

In many ways, turning off the Messenger feature is an easy decision, because most consumers never used it, Charney said, and companies have the expertise to turn it back on.

"From a consumer, end user point of view, I think it is something that will be left off," he said.

[Jeff]

Please note that this has nothing to do with instant messaging. The "messenger service" is NOT related to Windows Messenger or MSN Messenger in any way.

Yes, it is confusing. But the bottom line? This is a good decision on Microsoft's part.

[restless311]

Here's a little info on the Messenger Service from http://www.blackviper.com/WinXP/serv....htm#Messenger

Messenger
This service provides the ability to send messages between clients and servers. This service needs not to be running under normal "home" conditions. It is also advisable to make this service go away to avoid the possibility of "net send" messages hitting your computer from the internet. This has nothing to do with MSN Messenger, nor is it "WinPopUp."

To test for this security vulnerability, at the command prompt, (run: cmd.exe) type:

net send 127.0.0.1 hi

If you get a popup "hi" message, you should disable the Messenger service.
If you get an error stating, "The message alias could not be found on the network," you are safe.

If, for whatever reason, you need the Messenger service running but wish not to have spam popups active, you can disable the particular ports at your firewall. The Messenger service uses UDP ports 135, 137, and 138; TCP ports 135, 139, and 445.

Here's some info on how to configure the Windows XP Home and Professional Service Configurations.

http://www.blackviper.com/WinXP/servicecfg.htm

[Jeff]

Good post, Restless! Thanks... very concise description of the Windows Messenger service.

[lotrmatrix]

I personally think Windows Messenger which is part of Windows XP should go for good. From what I have read, Windows Messenger is losing a lot of users, because MSN Messenger is way better with cool and awesome features. Windows Messenger has a old look and doesn't have much features. What is the point with two Messenger, Windows Messenger and MSN Messenger? Both from Microsoft. I believe eventually Windows Messenger will die out and MSN Messenger will keep on growing and growing. Down below I have posted I linked from Windows Messenger 5.0 latest version of Windows Messenger and MSN Messenger 6.1 latest version of MSN Messenger. Let you decided why I think it is a good idea what Microsoft is doing, with Windows Messenger service. I personally use Windows XP Home Edition, and Windows Messenger is not good, boring look and features.

http://messenger.microsoft.com - Windows Messenger

http://messenger.msn.com - MSN Messenger

[Jeff]

LOTRMATRIX, obviously you didn't actually read the story, because it clearly states that it is NOT referring to Windows Messenger the instant messaging program. It's referring to the Windows messenger service that is part of the operating system and has nothing to do with instant messaging!

Now go back and read it again!

[nathanintu]

Im still useing Windows Messenger, v4.0 was nice untill it made me upgrade to 4.7.
Does the job very well

[magistyk]

All you people need to actually read the article before posting, this has nothing to do with the Windows/MSN Messenging Service that you use to contact your friends. It is the built-in WINDOWS MESSAGING SERVICE that allowes a user to use netsend to send messages to other computers.