[O/T] The Dreaded msmsgs.exe

[legacy-coldplasma]

I'm sure we all know about this cover up, so has anybody got a solution to get rid of this process? I've tried deleting the source, but it just reinstates itself and everytime I close it, it comes back a few mins later :cry:

[legacy-senshu]

I have no idea what you're talking about, I haven't seen that running in ages. Try disabling the service.

[legacy-coldplasma]

Originally posted by senshu
I have no idea what you're talking about, I haven't seen that running in ages. Try disabling the service. i knew someone was gonna say this ;) unfortunatly, the service only blocks the spam popups and does not stop msmsgs from running in the backround

[legacy-zoro]

msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong :)

[legacy-senshu]

I didn't say stop the service, I said disable it. Then it will never start in the first place.

[legacy-senshu]

Originally posted by zoro
msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong :)

No, MSN Messenger is msnmsgr.exe

[legacy-coldplasma]

Originally posted by zoro
msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong :) your close, but it is infact Windows Messenger and it takes up about 10mb of RAM that could be put to better use by searching for interesting images of toenail clippings

[legacy-zoro]

Originally posted by coldplasma
your close, but it is infact Windows Messenger and it takes up about 10mb of RAM that could be put to better use by searching for interesting images of toenail clippings

Close? The same thing :p (as good as :))

And toenail clippings??? GIMMEH! :D

[legacy-Captain_anarchy]

download this (http://www.dougknox.com/xp/utils/MessengerDisable.zip)

[legacy-EX1LE]

Control panel>Add or remove programs>Add/Remove windows components

[legacy-coldplasma]

Originally posted by EX1LE
Control panel>Add or remove programs>Add/Remove windows components tried it months ago, didnt work

[legacy-Captain_anarchy]

Originally posted by Captain_anarchy
download this (http://www.dougknox.com/xp/utils/MessengerDisable.zip)

[legacy-GeneSplicer]

Originally posted by Captain_anarchy
download this (http://www.dougknox.com/xp/utils/MessengerDisable.zip)

[legacy-senshu]

Originally posted by Captain_anarchy
download this (http://www.dougknox.com/xp/utils/MessengerDisable.zip)

How about telling us exactly what that does, instead of just saying download this.

[legacy-B1tchChicken]

Removing Windows components from the Add/Remove Program manager doesn't work very well at all.

Disable the service. Nab an advanced task manager http://www.neuber.com/taskmanager/ to see what's running under the old hood. And then kill it.

Best to create your own custom Windows installation.

http://nuhi.msfn.org/nlite.html


:up:

[legacy-Venael[FatZ]]

@echo off
RunDll32 advpack.dll,LaunchINFSection %windir%\inf\msmsgs.inf,BLC.Remove
@echo REGEDIT4>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
@echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express]>>%TMP%\RemoveMsgr.reg
@echo "Hide Messenger"=dword:00000002>>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
regedit /s %TMP%\RemoveMsgr.reg

Paste that into a .bat and run it. That will uninstall Windows Messenger.

[jefe]

You can also boot into safe mode and delete the program itself.

[Renegade]

Well there is disabling the service and not allowing it to run at startup, then there is uninstalling it (google for Uninstall Windows Messenger and it gives you an easy line to type into the run command), then theres the links people have given here to disable it. There are loads of ways.

[legacy-El Gringo]

In the case you have Norton AV, go to options - instant messaging and disable securing windows instant messaging (or something like that, mine is in dutch). Because that would restart the service even after you have disabled it.

[legacy-0V3RC10CK3D]

Try XP-AntiSpy
http://www.xp-antispy.org/

[legacy-Geezus]

Just uninstalling it worked fine for me.

[legacy-Bin drinkin]

easy peasy

go to start/run

type in: MSCONFIG

box opens

choose the startup tab

de-tick msnmsgr.exe



click ctrl/alt/del - check PROCESSES - kill msnmsgr.exe

no - go to programme files & see folder called: 'Messenger'

re-name the folder to anything you like

done.

[legacy-coldplasma]

Originally posted by Bin drinkin
easy peasy

go to start/run

type in: MSCONFIG

box opens

choose the startup tab

de-tick msnmsgr.exe



click ctrl/alt/del - check PROCESSES - kill msnmsgr.exe

no - go to programme files & see folder called: 'Messenger'

re-name the folder to anything you like

done. ive tried all of them, they dont work, but i am interested in the NAV connection :D

[legacy-Bin drinkin]

well you must be doing something wrong then cos it does kill it - or mebbe there's some hack that creates it again - i dunno, but that works for 100% sure

[legacy-coldplasma]

Originally posted by Bin drinkin
well you must be doing something wrong then cos it does kill it - or mebbe there's some hack that creates it again - i dunno, but that works for 100% sure this is what i do, i kill the messenger process, delete the folder, uninstall from windows component, check to see if folder is still gone, make sure process is still gone, then 5 mins later, messenger is back

[legacy-Bullrog]

Forget that! someone gimme rell me how to get rid of lsass.exe :bulb:

[legacy-badger_fruit]

Originally posted by Bullrog
Forget that! someone gimme rell me how to get rid of lsass.exe :bulb:

Erm, I dont think you can

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token


Taken from here --> http://www.neuber.com/taskmanager/process/lsass.exe.html

[legacy-Guyver1]

jesus christ the crap in this thread to disable a simple service.

win2k/XP users, control panel/administrative tools/services

scroll down

Messenger

right click on it

Properties

Startup Type, choose disabled.

restart your machine

gone

[legacy-IdleHand]

Originally posted by coldplasma
this is what i do, i kill the messenger process, delete the folder, uninstall from windows component, check to see if folder is still gone, make sure process is still gone, then 5 mins later, messenger is back
rename the msn messenger directory

[legacy-Sh0rty]

You can install XP Antispy to uninstall, disable, disable it starting with outlook, etc. This program also does a whole ton of other stuff.

http://www.xp-antispy.org/

[legacy-davidjmays]

Really, you should try to be more specific, everyone.
'msnmsgs.exe' is MSN Messenger 4.7! Messenger 6.2 is 'msnmsgr.exe'. The messenger logo in the background tasks area should be set to Offline. If you prefer it on, swith status to 'Busy' this will get rid of login alerts.

---------------------

If you want to get rid of messenger altogether, go to add/remove programs then a) Search the program list and uninstall it
b) Click Windows components and search for it through there. :o :o :o

---------------------

As a last resort, if it is still there, you may have a trojan/spyware or other malicious script. :confused: The solution, get McAfee 2004! :weird:

[legacy-El Gringo]

Originally posted by coldplasma
ive tried all of them, they dont work, but i am interested in the NAV connection :D
Less than 1 minute search on Google (http://www.google.com/search?q=norton+msmsgs.exe&sourceid=firefox&start=0&start=0&ie=utf-8&oe=utf-8):
http://www.annoyances.org/exec/forum/winxp/1081190860

[legacy-Coolguy]

just delete the file, it worked for me still haven't had any probs (2 months)

[legacy-GeStahl]

Originally posted by IdleHand
rename the msn messenger directory

:up: :up:

[KriLL3.8™]

Filemon (http://www.sysinternals.com/files/NTFILMON.ZIP)

This application enables you to watch your system and see what files are being accessed by programs and you can filter to remove/only show selected files (any) or sertain applications (.exe etc)

I found a little bugger that kept making copies of himself... I narrowed all his files down in a single search and made em simultaniosly read-only and removed all rights from all users (including me)
Norton Adaware Spybot-S&D etc all failed to find it even if I pointed em right to it...

Now the appication cant do anything.. somehow it make explorer.exe execute it but it simply cant.. access denied.. (not a message.. the status part of filemon just says so)

http://www.sysinternals.com/images/screenshots/dmonshot.gif

[Magwa]

Originally posted by GeStahl
:up: :up:

agreed the very best way is to rename the messenger folder in windows to "i Hate you" and you will never see it again ever you must have administrative access and kill it with task manager before trying to rename.

[legacy-madbri]

Originally posted by coldplasma
I'm sure we all know about this cover up, so has anybody got a solution to get rid of this process? I've tried deleting the source, but it just reinstates itself and everytime I close it, it comes back a few mins later :cry:

Its alright killing MSN Messenger's 'surface' presence, but you also need to kill the 'root' of the problem. This is what I've just done to remove it permanently from my computer:-

rebooted the computer in Safe Mode

opened up My Computer >>> C: Local Disk >>> Program Files

deleted Messenger program folder (i.e. moved to recycle bin)

returned to Desktop and pressed F3 to access Search/Find tool

searched for messenger, MSN etc and deleted relevant files

closed Search, then opened up Registry Editor

went into both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER and deleted Messenger Service (under Microsoft drop-down) and other registry entries that were related to MSN Messenger

persisted in the registry editor until all visible registry entries to MSN Messenger were deleted

closed registry editor, emptied the recycle bin, and turned off safe mode

restarted back into normal mode

This should get rid of the sod for good :up:

Since rebooting back into normal mode, the msmsgs.exe application has not run. I checked this by hitting Ctrl+Alt+Del simultaneously, and checking the Processes tab. By deleting its registry entries, you are effectively destroying the root of the problem. This in turn stops the regeneration process.

[legacy-ToothlessHero]

The windows messenger is a pain. you need to make sure in the preferences inside the program are not setup to launch on startup. If you use outlook, there is an option there to start it up as well as all the other stuff that is listed here.

MSconfig, regedit (in two places) local machine and current user go to software->microsoft->windows->run and runonce. Make sure it isn't there as well.

Disable the process and uninstall with add remove windows components worked for me. And be sure to read about all the windows updates...It may try to reinstall the software for ya. Fun stuff.

My little contribution.

ToothlessHero

[legacy-senshu]

The messenger service and MSN messenger are not the same thing. If you get pop ups that look like system notices and you have to click Okay to close them, those have nothing to do with MSN messenger. Updating Windows will take care of this, but if you have some strange reason for not updating, then just do this:

Start > Run > cmd > services.msc > right click messenger, select properties and disable it.

That's all there is to it, really.

[kisk]

I ran into this problem awhile back. I deleted all the reg and startup references to msmsgs but it still kept coming up.

come to find out if you're running norton antivirus you have to turn the instant message protection options for msn messenger off. otherwise it'll still run.

nav > options > instant messaging > uncheck 'protect msn msgr'

of course you also want to make sure the startup reg keys and other startup references are deleted -- check your task scheduler too.

but like senshu said, msmsgs and the messenger service are not the same thing

gl

[AmericanWoman]

Start, run. copy and paste this. RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove


Hit ok. BYE BYE !:p :heart: P.S. make sure you exit the Mssger. Prog first.

[legacy-ToothlessHero]

Originally posted by senshu
The messenger service and MSN messenger are not the same thing. If you get pop ups that look like system notices and you have to click Okay to close them, those have nothing to do with MSN messenger. Updating Windows will take care of this, but if you have some strange reason for not updating, then just do this:

Start > Run > cmd > services.msc > right click messenger, select properties and disable it.

That's all there is to it, really.

The Messenger service is the first thing after an install of winxp...before I load SP1 and all that. That's all it took to keep it from poping up, but the windows messenger and MSN messenger are a pain in the keyster.

[legacy-senshu]

Originally posted by ToothlessHero
The Messenger service is the first thing after an install of winxp...before I load SP1 and all that. That's all it took to keep it from poping up, but the windows messenger and MSN messenger are a pain in the keyster.

Why? Just open messenger, you don't need to sign in, and select tools > options > general and then uncheck all the boxes under Sign In.

And if it's coming up because you're using Outlook...well, you're using Outlook and not MSN Messenger? :bulb:

Toothless, why install XP and then SP1 and all that? Just slipstream your CD and you don't have to worry about it. I just made my slipstreamed SP2 CD and it is awesome. The THREE recommended updates that come up on Windows Update after a fresh install or three that I don't even use.

[legacy-Narcolepsy]

Listen everyone:

You cannot disable it the way you would a traditional service if you have NAV!

Instead, before you can, you need to disable IM virus scanning if you have NAV 2004. I know this from experience, believe me.

[legacy-senshu]

Originally posted by Narcolepsy
Listen everyone:

You cannot disable it the way you would a traditional service if you have NAV!

Instead, before you can, you need to disable IM virus scanning if you have NAV 2004. I know this from experience, believe me.

You can't disable MSN messenger as you would a service, because it is not a service. messenger is a service that is completely separate from MSN messenger.

For messenger, you can disable the service and that's the end of that.

For MSN messenger, if you remove the component (Add/Remove Windows components) that will be the end of that. ARe you telling me that you've removed Windows Messenger, but it comes back because NAV is trying to scan it?

[legacy-compjarg]

C:\WINDOW\inf\sysoc.inf

delete all instances of the word "hide"

save

add or remove programs

add/remove windows components

uncheck windows messanger and highlite another thing, make sure that both windows messanger's are unchecked

click next

It is now safe to delete the folder where this dreaded POS resides
just don't download it again through windows update

EDIT: dont forget to remove msn explorer too, nobody uses that POS either

[legacy-senshu]

Originally posted by compjarg
It is now safe to delete the folder where this dreaded POS resides
just don't download it again through windows update


Dude, you have your MSN messenger ID in your sig!!!!!

[legacy-compjarg]

I use Trillian 2.013 Pro to mannage all my instant messanging ****. I hate downloading all the official IM programs just to talk to people. and besides, all that other **** is filled with adware, spyware, and junk.

[legacy-senshu]

Originally posted by compjarg
all that other **** is filled with adware, spyware, and junk.

Or not. I can dig using Trillian instead of 4 or 5 different IM programs, though.

[kisk]

Originally posted by compjarg
I use Trillian 2.013 Pro to mannage all my instant messanging ****. I hate downloading all the official IM programs just to talk to people. and besides, all that other **** is filled with adware, spyware, and junk.

don't mean to go off-topic, but I use trillian 2.013 pro as well. much better than the official clients. anyway, thought you might be interested that trillian3 is fixing to start beta testing .. you can sign up at http://www.ceruleanstudios.com/beta/

[KriLL3.8™]

Hope it got voice/video com and working file transfers...

[kisk]

yeah file transfers is all f****d up ... for me at least

[KriLL3.8™]

Originally posted by kisk
yeah file transfers is all f****d up ... for me at least

Sometimes it doesn't work, sometimes I get 2KB/s.. :sour:

[legacy-ToothlessHero]

Originally posted by senshu
Why? Just open messenger, you don't need to sign in, and select tools > options > general and then uncheck all the boxes under Sign In.

And if it's coming up because you're using Outlook...well, you're using Outlook and not MSN Messenger? :bulb:



Toothless, why install XP and then SP1 and all that? Just slipstream your CD and you don't have to worry about it. I just made my slipstreamed SP2 CD and it is awesome. The THREE recommended updates that come up on Windows Update after a fresh install or three that I don't even use.

There are occasions that I actually use the thing. But I use the MSN messenger. the Windows messenger is the one that is a pain. As far as Outlook goes, there is a check box in there to launch windows messenger for IM's through outlook. (I'm on my mac at work otherwise I'd tell ya the exact location of what i'm talking about if my explanation is muddy)

As far as SP1 goes, I have the Windows Update CD that microsoft shipped out for free for 56K folks. It has all the updates up until Feb 04. I'm not familiar with the slipstream is...gonna have to do some research. Got links? PM them if you don't mind.

Thanks
Toothless

[legacy-NiTrOcALyPsE]

Originally posted by Venael[FatZ]
@echo off
RunDll32 advpack.dll,LaunchINFSection %windir%\inf\msmsgs.inf,BLC.Remove
@echo REGEDIT4>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
@echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express]>>%TMP%\RemoveMsgr.reg
@echo "Hide Messenger"=dword:00000002>>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
regedit /s %TMP%\RemoveMsgr.reg

Paste that into a .bat and run it. That will uninstall Windows Messenger.

Awesome! That worked flawlessly.

[legacy-Archer]

That it did. Thanks!

[legacy-Turbidity]

Originally posted by senshu
Or not. I can dig using Trillian instead of 4 or 5 different IM programs, though.

See: WildTangent

[legacy-Archer]

I personally use Gaim to connect to AIM and Jabber. I'd use it for MSN as well, except the file transfer feature is somewhat lacking (although it is being worked on), and I do tend to do a lot of file transfers over MSN.

Gotta love the fact that Gaim is OpenSource, though, and constantly being updated. :)

[legacy-The_Smurf]

Originally posted by IdleHand
rename the msn messenger directory

Works fer me.