Facing pressure to protect users from spam and virus attacks using the built-in Windows Messenger Service, Microsoft and America Online each are taking new steps to safeguard users’ PCs.
The rarely-used Messenger Service — not to be confused with the Redmond, Wash. software vendor’s Windows XP instant messaging client of the same name — is intended to exchange “net send” and “Alerter” service messages between computers. Those can include updates from print jobs, a broadcast announcement by a system admin, or an alert following the activation of an uninterruptible power supply.
For that reason, the Messenger Service (which also relies on Remote Procedure Call services, or RPC) has been enabled by default on Windows operating systems since the mid-1990s, and launches automatically when a user boots up his or her personal computer. In its default configuration, Microsoft Windows also opens the NetBIOS TCP ports necessary to receive messages.
While it has provided instructions for users to disable the service on their own, Microsoft has said in the past that if turned off or blocked, applications that depend on the service could malfunction.
But last year, some ISPs, like AT&T Broadband and America Online, took the initiative to block the open ports on their subscribers computers. That’s because spammers have taken advantage of the existence and accessibility of RPC and most users’ open ports to send deluges of spam.
Making the problem more frustrating for end-users is that the recipient of NetBIOS messages (either legitimate or spammed) sees a dialog box that bears the title “Messenger Service.”That bears a similarity to Microsoft’s Windows Messenger IM client, which has led some users to wrongly conclude they were being spammed from the company’s IM network.
Spokespeople from Microsoft’s MSN service said last year that it would look into the matter, and that abusers of the service weren’t actually capable of harming users’ computers — just of being annoying.
That changed in recent weeks, however. A virus, which some consultants dubbed the “Son of MSBlaster,” has been circulating that takes advantage of a flaw in the service that causes Windows-based computers to crash. The service also created a hole that allowed for another vulnerability — a buffer overrun flaw that could throw a machine at the mercy of a malicious user.
In response to the lingering privacy concerns and more recent security worries, AOL this month began implementing a script that deactivates the service entirely — rather than simply blocking the ports, as it had attempted last year. The script runs when users log on to its service.
Microsoft said this week that it, too, now has plans to switch off the service as well.
Company executives announced the deactivation at the Microsoft Professional Developer’s Conference on Tuesday. Specifically, Microsoft opted to turn off the services in Windows XP Service Pack 2, which is due in the first half of 2004.
Microsoft executives also said the company would activate Internet Connection Firewall (ICF) by default on XP boxes. ICF, a firewall built into XP, is normally turned off by default. Security experts said ICF could have blocked MSBlaster if it had been enabled.
Turning on ICF demonstrates a proactive approach to securing the desktop, said Gartner security analyst John Pescatore.
“Microsoft is definitely doing the right thing, and should do much, much more of it,” Pescatore told our colleagues at internetnews.com. “One of the fundamental principles of security is ‘Deny everything except that which is expressly permitted.’ That translates to having all dangerous services (like Messenger) off by default and requiring the user to take explicit actions to choose to enable those dangerous services.”
Microsoft, he added, is trying to break a lifetime habit.
“In desktop products they have had a corporate blind spot in the past — Microsoft became the world’s biggest software company by putting all the control in the hands of the PC user,” Pescatore said. “They didn’t consider safety a key requirement — making Messenger and other things (like telnet or FTP services and the like) off by default is another important step.”
Microsoft, of course, also is busily working to make good on its company-wide Trustworthy Computing pledge to stave off security problems by minimizing vulnerabilities.
The disabling of the Messenger Service comes amid proclamations from company executives that Microsoft is looking at ways to fortify the security of Windows in the face of computer viruses, worms and hackers.
In addition to terminating the Messenger Service, Microsoft said it would roll out a new API that makes the RPC services more secure.
Christopher Saunders is managing editor of InstantMessagingPlanet.com. internetnews.com assistant editor Clint Boulton is contributed to this story.
Ethics and Artificial Intelligence: Driving Greater Equality
FEATURE | By James Maguire,
December 16, 2020
AI vs. Machine Learning vs. Deep Learning
FEATURE | By Cynthia Harvey,
December 11, 2020
Huawei’s AI Update: Things Are Moving Faster Than We Think
FEATURE | By Rob Enderle,
December 04, 2020
Keeping Machine Learning Algorithms Honest in the ‘Ethics-First’ Era
ARTIFICIAL INTELLIGENCE | By Guest Author,
November 18, 2020
Key Trends in Chatbots and RPA
FEATURE | By Guest Author,
November 10, 2020
FEATURE | By Samuel Greengard,
November 05, 2020
ARTIFICIAL INTELLIGENCE | By Guest Author,
November 02, 2020
How Intel’s Work With Autonomous Cars Could Redefine General Purpose AI
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
October 29, 2020
Dell Technologies World: Weaving Together Human And Machine Interaction For AI And Robotics
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
October 23, 2020
The Super Moderator, or How IBM Project Debater Could Save Social Media
FEATURE | By Rob Enderle,
October 16, 2020
FEATURE | By Cynthia Harvey,
October 07, 2020
ARTIFICIAL INTELLIGENCE | By Guest Author,
October 05, 2020
CIOs Discuss the Promise of AI and Data Science
FEATURE | By Guest Author,
September 25, 2020
Microsoft Is Building An AI Product That Could Predict The Future
FEATURE | By Rob Enderle,
September 25, 2020
Top 10 Machine Learning Companies 2021
FEATURE | By Cynthia Harvey,
September 22, 2020
NVIDIA and ARM: Massively Changing The AI Landscape
ARTIFICIAL INTELLIGENCE | By Rob Enderle,
September 18, 2020
Continuous Intelligence: Expert Discussion [Video and Podcast]
ARTIFICIAL INTELLIGENCE | By James Maguire,
September 14, 2020
Artificial Intelligence: Governance and Ethics [Video]
ARTIFICIAL INTELLIGENCE | By James Maguire,
September 13, 2020
IBM Watson At The US Open: Showcasing The Power Of A Mature Enterprise-Class AI
FEATURE | By Rob Enderle,
September 11, 2020
Artificial Intelligence: Perception vs. Reality
FEATURE | By James Maguire,
September 09, 2020
Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.
Advertise with TechnologyAdvice on Datamation and our other data and technology-focused platforms.
Advertise with Us
Property of TechnologyAdvice.
© 2025 TechnologyAdvice. All Rights Reserved
Advertiser Disclosure: Some of the products that appear on this
site are from companies from which TechnologyAdvice receives
compensation. This compensation may impact how and where products
appear on this site including, for example, the order in which
they appear. TechnologyAdvice does not include all companies
or all types of products available in the marketplace.