[O/T] The Dreaded msmsgs.exe

[legacy-coldplasma]

I'm sure we all know about this cover up, so has anybody got a solution to get rid of this process? I've tried deleting the source, but it just reinstates itself and everytime I close it, it comes back a few mins later :cry:

[legacy-senshu]

I have no idea what you're talking about, I haven't seen that running in ages. Try disabling the service.

[legacy-coldplasma]

Originally posted by senshu
I have no idea what you're talking about, I haven't seen that running in ages. Try disabling the service.

i knew someone was gonna say this unfortunatly, the service only blocks the spam popups and does not stop msmsgs from running in the backround

[legacy-zoro]

msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong

[legacy-senshu]

I didn't say stop the service, I said disable it. Then it will never start in the first place.

[legacy-senshu]

Originally posted by zoro
msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong

No, MSN Messenger is msnmsgr.exe

[legacy-coldplasma]

Originally posted by zoro
msmsgs.exe is MSN Messenger isn't it? It's not the messaging service iirc (NET SEND 127.0.0.1 hello) <-- that thing

Maybe I'm wrong

your close, but it is infact Windows Messenger and it takes up about 10mb of RAM that could be put to better use by searching for interesting images of toenail clippings

[legacy-zoro]

Originally posted by coldplasma
your close, but it is infact Windows Messenger and it takes up about 10mb of RAM that could be put to better use by searching for interesting images of toenail clippings

Close? The same thing (as good as )

And toenail clippings??? GIMMEH!

[legacy-Captain_anarchy]

download this

[legacy-EX1LE]

Control panel>Add or remove programs>Add/Remove windows components

[legacy-coldplasma]

Originally posted by EX1LE
Control panel>Add or remove programs>Add/Remove windows components

tried it months ago, didnt work

[legacy-Captain_anarchy]

Originally posted by Captain_anarchy
download this

[legacy-GeneSplicer]

Originally posted by Captain_anarchy
download this

[legacy-senshu]

Originally posted by Captain_anarchy
download this

How about telling us exactly what that does, instead of just saying download this.

[legacy-B1tchChicken]

Removing Windows components from the Add/Remove Program manager doesn't work very well at all.

Disable the service. Nab an advanced task manager http://www.neuber.com/taskmanager/ to see what's running under the old hood. And then kill it.

Best to create your own custom Windows installation.

http://nuhi.msfn.org/nlite.html


:up:

[legacy-Venael[FatZ]]

@echo off
RunDll32 advpack.dll,LaunchINFSection %windir%\inf\msmsgs.inf,BLC.Remove
@echo REGEDIT4>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
@echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Outlook Express]>>%TMP%\RemoveMsgr.reg
@echo "Hide Messenger"=dword:00000002>>%TMP%\RemoveMsgr.reg
@echo.>>%TMP%\RemoveMsgr.reg
regedit /s %TMP%\RemoveMsgr.reg

Paste that into a .bat and run it. That will uninstall Windows Messenger.

[jefe]

You can also boot into safe mode and delete the program itself.

[Renegade]

Well there is disabling the service and not allowing it to run at startup, then there is uninstalling it (google for Uninstall Windows Messenger and it gives you an easy line to type into the run command), then theres the links people have given here to disable it. There are loads of ways.

[legacy-El Gringo]

In the case you have Norton AV, go to options - instant messaging and disable securing windows instant messaging (or something like that, mine is in dutch). Because that would restart the service even after you have disabled it.

[legacy-0V3RC10CK3D]

Try XP-AntiSpy
http://www.xp-antispy.org/

[legacy-Geezus]

Just uninstalling it worked fine for me.

[legacy-Bin drinkin]

easy peasy

go to start/run

type in: MSCONFIG

box opens

choose the startup tab

de-tick msnmsgr.exe



click ctrl/alt/del - check PROCESSES - kill msnmsgr.exe

no - go to programme files & see folder called: 'Messenger'

re-name the folder to anything you like

done.

[legacy-coldplasma]

Originally posted by Bin drinkin
easy peasy

go to start/run

type in: MSCONFIG

box opens

choose the startup tab

de-tick msnmsgr.exe



click ctrl/alt/del - check PROCESSES - kill msnmsgr.exe

no - go to programme files & see folder called: 'Messenger'

re-name the folder to anything you like

done.

ive tried all of them, they dont work, but i am interested in the NAV connection

[legacy-Bin drinkin]

well you must be doing something wrong then cos it does kill it - or mebbe there's some hack that creates it again - i dunno, but that works for 100% sure

[legacy-coldplasma]

Originally posted by Bin drinkin
well you must be doing something wrong then cos it does kill it - or mebbe there's some hack that creates it again - i dunno, but that works for 100% sure

this is what i do, i kill the messenger process, delete the folder, uninstall from windows component, check to see if folder is still gone, make sure process is still gone, then 5 mins later, messenger is back

[legacy-Bullrog]

Forget that! someone gimme rell me how to get rid of lsass.exe :bulb:

[legacy-badger_fruit]

Originally posted by Bullrog
Forget that! someone gimme rell me how to get rid of lsass.exe :bulb:

Erm, I dont think you can

"lsass.exe" is the Local Security Authentication Server. It verifies the validity of user logons to your PC/Server. It generates the process responsible for authenticating users for the Winlogon service. This process is performed by using authentication packages such as the default Msgina.dll. If authentication is successful, Lsass generates the user's access token, which is used to launch the initial shell. Other processes that the user initiates inherit this token


Taken from here --> http://www.neuber.com/taskmanager/pr...lsass.exe.html

[legacy-Guyver1]

jesus christ the crap in this thread to disable a simple service.

win2k/XP users, control panel/administrative tools/services

scroll down

Messenger

right click on it

Properties

Startup Type, choose disabled.

restart your machine

gone

[legacy-IdleHand]

Originally posted by coldplasma
this is what i do, i kill the messenger process, delete the folder, uninstall from windows component, check to see if folder is still gone, make sure process is still gone, then 5 mins later, messenger is back

rename the msn messenger directory

[legacy-Sh0rty]

You can install XP Antispy to uninstall, disable, disable it starting with outlook, etc. This program also does a whole ton of other stuff.

http://www.xp-antispy.org/

[legacy-davidjmays]

Really, you should try to be more specific, everyone.
'msnmsgs.exe' is MSN Messenger 4.7! Messenger 6.2 is 'msnmsgr.exe'. The messenger logo in the background tasks area should be set to Offline. If you prefer it on, swith status to 'Busy' this will get rid of login alerts.

---------------------

If you want to get rid of messenger altogether, go to add/remove programs then a) Search the program list and uninstall it
b) Click Windows components and search for it through there.

---------------------

As a last resort, if it is still there, you may have a trojan/spyware or other malicious script. The solution, get McAfee 2004! :weird:

[legacy-El Gringo]

Originally posted by coldplasma
ive tried all of them, they dont work, but i am interested in the NAV connection

Less than 1 minute search on Google:
http://www.annoyances.org/exec/forum/winxp/1081190860

[legacy-Coolguy]

just delete the file, it worked for me still haven't had any probs (2 months)

[legacy-GeStahl]

Originally posted by IdleHand
rename the msn messenger directory

:up: :up:

[KriLL3.8™]

Filemon

This application enables you to watch your system and see what files are being accessed by programs and you can filter to remove/only show selected files (any) or sertain applications (.exe etc)

I found a little bugger that kept making copies of himself... I narrowed all his files down in a single search and made em simultaniosly read-only and removed all rights from all users (including me)
Norton Adaware Spybot-S&D etc all failed to find it even if I pointed em right to it...

Now the appication cant do anything.. somehow it make explorer.exe execute it but it simply cant.. access denied.. (not a message.. the status part of filemon just says so)

[Magwa]

Originally posted by GeStahl
:up: :up:

agreed the very best way is to rename the messenger folder in windows to "i Hate you" and you will never see it again ever you must have administrative access and kill it with task manager before trying to rename.

[legacy-madbri]

Originally posted by coldplasma
I'm sure we all know about this cover up, so has anybody got a solution to get rid of this process? I've tried deleting the source, but it just reinstates itself and everytime I close it, it comes back a few mins later :cry:

Its alright killing MSN Messenger's 'surface' presence, but you also need to kill the 'root' of the problem. This is what I've just done to remove it permanently from my computer:-

rebooted the computer in Safe Mode

opened up My Computer >>> C: Local Disk >>> Program Files

deleted Messenger program folder (i.e. moved to recycle bin)

returned to Desktop and pressed F3 to access Search/Find tool

searched for messenger, MSN etc and deleted relevant files

closed Search, then opened up Registry Editor

went into both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER and deleted Messenger Service (under Microsoft drop-down) and other registry entries that were related to MSN Messenger

persisted in the registry editor until all visible registry entries to MSN Messenger were deleted

closed registry editor, emptied the recycle bin, and turned off safe mode

restarted back into normal mode

This should get rid of the sod for good :up:

Since rebooting back into normal mode, the msmsgs.exe application has not run. I checked this by hitting Ctrl+Alt+Del simultaneously, and checking the Processes tab. By deleting its registry entries, you are effectively destroying the root of the problem. This in turn stops the regeneration process.

[legacy-ToothlessHero]

The windows messenger is a pain. you need to make sure in the preferences inside the program are not setup to launch on startup. If you use outlook, there is an option there to start it up as well as all the other stuff that is listed here.

MSconfig, regedit (in two places) local machine and current user go to software->microsoft->windows->run and runonce. Make sure it isn't there as well.

Disable the process and uninstall with add remove windows components worked for me. And be sure to read about all the windows updates...It may try to reinstall the software for ya. Fun stuff.

My little contribution.

ToothlessHero

[legacy-senshu]

The messenger service and MSN messenger are not the same thing. If you get pop ups that look like system notices and you have to click Okay to close them, those have nothing to do with MSN messenger. Updating Windows will take care of this, but if you have some strange reason for not updating, then just do this:

Start > Run > cmd > services.msc > right click messenger, select properties and disable it.

That's all there is to it, really.

[kisk]

I ran into this problem awhile back. I deleted all the reg and startup references to msmsgs but it still kept coming up.

come to find out if you're running norton antivirus you have to turn the instant message protection options for msn messenger off. otherwise it'll still run.

nav > options > instant messaging > uncheck 'protect msn msgr'

of course you also want to make sure the startup reg keys and other startup references are deleted -- check your task scheduler too.

but like senshu said, msmsgs and the messenger service are not the same thing

gl