SPAM problem after setting up Network

Help! Especially with young kids at home. I
successfully set up my Microsoft Broadband Home Network
(using the MN-700 hardware)and it works great except now
periodically throughout the day my Internet browser
automatically launches a series of porn sites. It is the
same pattern of the same 4-5 sites, but they just launch
out of the blue! Any ideas on how to prevent this?

THnaks so much on any ideas! I have ICF enabled although
I did notice in the setting tab there were a ton of
MSMMSGS entires that were mostly checked. I am also doing
MAC address filtering so supposedly only my two computers
are the only that should be able to access my home
network.

Windows Messenger 4.x is creating those.

Windows Messenger 5.x won't.
Would suggest you download that from
http://www.microsoft.com/downloads/d...DisplayLang=en

--
Jason Tsang - Microsoft MVP

Find out about the MS MVP Program -
http://mvp.support.microsoft.com/default.aspx

"(E-Mail Removed)" <(E-Mail Removed)> wrote in
message news:21cb601c45ae6$1a49f950$(E-Mail Removed)...
> Help! Especially with young kids at home. I
> successfully set up my Microsoft Broadband Home Network
> (using the MN-700 hardware)and it works great except now
> periodically throughout the day my Internet browser
> automatically launches a series of porn sites. It is the
> same pattern of the same 4-5 sites, but they just launch
> out of the blue! Any ideas on how to prevent this?
>
> THnaks so much on any ideas! I have ICF enabled although
> I did notice in the setting tab there were a ton of
> MSMMSGS entires that were mostly checked. I am also doing
> MAC address filtering so supposedly only my two computers
> are the only that should be able to access my home
> network.

It is one of two things a porn virus and/or adware. I first recommend
that you go to http://housecall.antivirus.com And scan for viruses.
Then I also recommend you go to http://www.lavasoftusa.com Download &
install ad-aware update it & run a scan. Then download spybot search &
Destroy from either http://www.safer-networking.org/ or
http://spybot.eon.net.au/index.php?page=home Install it, update it, &
run a scan on it.

One other note if some of the sites contain Lolita you have the OPQ
virus which house call doesn't detect.

(E-Mail Removed) wrote:
> Help! Especially with young kids at home. I
> successfully set up my Microsoft Broadband Home Network
> (using the MN-700 hardware)and it works great except now
> periodically throughout the day my Internet browser
> automatically launches a series of porn sites. It is the
> same pattern of the same 4-5 sites, but they just launch
> out of the blue! Any ideas on how to prevent this?
>
> THnaks so much on any ideas! I have ICF enabled although
> I did notice in the setting tab there were a ton of
> MSMMSGS entires that were mostly checked. I am also doing
> MAC address filtering so supposedly only my two computers
> are the only that should be able to access my home
> network.

Um I think you posted this to the wrong message Jason.

Jason Tsang wrote:

> Windows Messenger 4.x is creating those.
>
> Windows Messenger 5.x won't.
> Would suggest you download that from
> http://www.microsoft.com/downloads/d...DisplayLang=en
>

The MSMSG entries in ICF are being caused by Windows Messenger 4.x.

--
Jason Tsang - Microsoft MVP

Find out about the MS MVP Program -
http://mvp.support.microsoft.com/default.aspx

"joker" <no-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Um I think you posted this to the wrong message Jason.
>
> Jason Tsang wrote:
>
> > Windows Messenger 4.x is creating those.
> >
> > Windows Messenger 5.x won't.
> > Would suggest you download that from
> >
http://www.microsoft.com/downloads/d...DisplayLang=en
> >
>

Sorry I missed that part. I only paid attention to the first paragraph.

Jason Tsang wrote:
> The MSMSG entries in ICF are being caused by Windows Messenger 4.x.
>

I run Ad-Aware and eTrust Antivirus. I will try the
Spybot Search and Destroy as well though. Some of the
sites are Lolita related and I ran a complete machine
scan using my eTrust anti-virus and it found no
infections.

I will also upgrade to Windows Messenger 5.0. I just
didn't know if allowing all those msmsgs services was
allowing a portal for those porn site launches to happen.

Thanks for the help Jason and Joker.

Jeff.

>-----Original Message-----
>It is one of two things a porn virus and/or adware. I
first recommend
>that you go to http://housecall.antivirus.com And scan
for viruses.
>Then I also recommend you go to
http://www.lavasoftusa.com Download &
>install ad-aware update it & run a scan. Then download
spybot search &
>Destroy from either http://www.safer-networking.org/ or
>http://spybot.eon.net.au/index.php?page=home Install it,
update it, &
>run a scan on it.
>
>One other note if some of the sites contain Lolita you
have the OPQ
>virus which house call doesn't detect.
>
>(E-Mail Removed) wrote:
>> Help! Especially with young kids at home. I
>> successfully set up my Microsoft Broadband Home
Network
>> (using the MN-700 hardware)and it works great except
now
>> periodically throughout the day my Internet browser
>> automatically launches a series of porn sites. It is
the
>> same pattern of the same 4-5 sites, but they just
launch
>> out of the blue! Any ideas on how to prevent this?
>>
>> THnaks so much on any ideas! I have ICF enabled
although
>> I did notice in the setting tab there were a ton of
>> MSMMSGS entires that were mostly checked. I am also
doing
>> MAC address filtering so supposedly only my two
computers
>> are the only that should be able to access my home
>> network.
>
>.
>

It isn't Messenger "allowing" it so much as the devious people who have
tapped into it are up to no good. Another site you may wish to keep in mind
is www.aumha.com/secure.htm . There is a lot of very good information there
on how to protect your system, and the site includes an online check of your
browser. The site is run by Microsoft MVP Jim Eshelman.
--
Chris H.
Microsoft Windows MVP
Tablet Creations - http://nicecreations.us/
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone


"(E-Mail Removed)" <(E-Mail Removed)> wrote in
message news:21d1d01c45af0$7d35b860$(E-Mail Removed)...
>I run Ad-Aware and eTrust Antivirus. I will try the
> Spybot Search and Destroy as well though. Some of the
> sites are Lolita related and I ran a complete machine
> scan using my eTrust anti-virus and it found no
> infections.
>
> I will also upgrade to Windows Messenger 5.0. I just
> didn't know if allowing all those msmsgs services was
> allowing a portal for those porn site launches to happen.
>
> Thanks for the help Jason and Joker.
>
> Jeff.
>
>>-----Original Message-----
>>It is one of two things a porn virus and/or adware. I
> first recommend
>>that you go to http://housecall.antivirus.com And scan
> for viruses.
>>Then I also recommend you go to
> http://www.lavasoftusa.com Download &
>>install ad-aware update it & run a scan. Then download
> spybot search &
>>Destroy from either http://www.safer-networking.org/ or
>>http://spybot.eon.net.au/index.php?page=home Install it,
> update it, &
>>run a scan on it.
>>
>>One other note if some of the sites contain Lolita you
> have the OPQ
>>virus which house call doesn't detect.
>>
>>(E-Mail Removed) wrote:
>>> Help! Especially with young kids at home. I
>>> successfully set up my Microsoft Broadband Home
> Network
>>> (using the MN-700 hardware)and it works great except
> now
>>> periodically throughout the day my Internet browser
>>> automatically launches a series of porn sites. It is
> the
>>> same pattern of the same 4-5 sites, but they just
> launch
>>> out of the blue! Any ideas on how to prevent this?
>>>
>>> THnaks so much on any ideas! I have ICF enabled
> although
>>> I did notice in the setting tab there were a ton of
>>> MSMMSGS entires that were mostly checked. I am also
> doing
>>> MAC address filtering so supposedly only my two
> computers
>>> are the only that should be able to access my home
>>> network.
>>
>>.
>>

The lolita was caused by one of the porn viruses in this case called OPQ.

Reboot into safe mode before doing anything else in these set of
instructions.

To remove the Virus you will need to disable system restore (This
assumes you are Running Windows ME or Windows XP).

In the registry editor search for OPQFile and delete that entry that it
finds.

In the registry editor search for lolita and delete all the entries that
it finds.

Clean out the temp folder for all profiles. I suggest running "%temp%"
(without the quotes) to get the current profiles temp folder.

Do a search for *.tmp & delete all the files found.

Now you can Enable System restore & reboot into normal mode as most of
the virus has been removed from your system.

These are all the directions I can remember on removing this virus.

You can call Microsoft support as last I knew they offered free virus
support. Just tell the person in customer central you were infected
with the OPQ virus & also inform the Tech that you are infected with
that virus. Make sure you tell the tech to search only for OPQ as he
should find several MS only articles that can sometimes remove that virus.

I don't know of any anti-virus software that is capable of removing that
insidious virus.

I don't trust the anti-virus software installed on your computer as it
is the first target of most modern viruses.

Klez is the first virus I know of that specifically attacks several
anti-virus software packages.

MSMSGS only created the entries, it had nothing to do with the virus.

You posted about two entirely different issues.

First the OPQ virus which is a major problem (I was told by one person
who I helped remove that virus that is was from an article in playboy
that he followed that created this problem) & second the entries for
MSMSGS in the port forwarding that were caused by old software.

(E-Mail Removed) wrote:
> I run Ad-Aware and eTrust Antivirus. I will try the
> Spybot Search and Destroy as well though. Some of the
> sites are Lolita related and I ran a complete machine
> scan using my eTrust anti-virus and it found no
> infections.
>
> I will also upgrade to Windows Messenger 5.0. I just
> didn't know if allowing all those msmsgs services was
> allowing a portal for those porn site launches to happen.
>
> Thanks for the help Jason and Joker.
>
> Jeff.
>
>
>>-----Original Message-----
>>It is one of two things a porn virus and/or adware. I
>
> first recommend
>
>>that you go to http://housecall.antivirus.com And scan
>
> for viruses.
>
>>Then I also recommend you go to
>
> http://www.lavasoftusa.com Download &
>
>>install ad-aware update it & run a scan. Then download
>
> spybot search &
>
>>Destroy from either http://www.safer-networking.org/ or
>>http://spybot.eon.net.au/index.php?page=home Install it,
>
> update it, &
>
>>run a scan on it.
>>
>>One other note if some of the sites contain Lolita you
>
> have the OPQ
>
>>virus which house call doesn't detect.
>>
>>(E-Mail Removed) wrote:
>>
>>>Help! Especially with young kids at home. I
>>>successfully set up my Microsoft Broadband Home
>
> Network
>
>>>(using the MN-700 hardware)and it works great except
>
> now
>
>>>periodically throughout the day my Internet browser
>>>automatically launches a series of porn sites. It is
>
> the
>
>>>same pattern of the same 4-5 sites, but they just
>
> launch
>
>>>out of the blue! Any ideas on how to prevent this?
>>>
>>>THnaks so much on any ideas! I have ICF enabled
>
> although
>
>>>I did notice in the setting tab there were a ton of
>>>MSMMSGS entires that were mostly checked. I am also
>
> doing
>
>>>MAC address filtering so supposedly only my two
>
> computers
>
>>>are the only that should be able to access my home
>>>network.
>>
>>.
>>

Did you accidentally misspell the address or did something happen so
that I can't go there? I tried to Ping but I got the following response

"C:\>ping www.aumha.com
Ping request could not find host www.aumha.com. Please check the name
and try again.
C:\>"

Chris H. wrote:

> It isn't Messenger "allowing" it so much as the devious people who have
> tapped into it are up to no good. Another site you may wish to keep in mind
> is www.aumha.com/secure.htm . There is a lot of very good information there
> on how to protect your system, and the site includes an online check of your
> browser. The site is run by Microsoft MVP Jim Eshelman.