pop up hell!

Do you have the option "Block Internet Servers" checked in ZoneAlarm, to block all inbound packets from Internet-zone machines, unless it is for an approved applications that are set to be Servers?
That should block the NetBIOS packets. It is how Ikeep ZA.
Other then that, you could Deny "Generic Host Process for Win32" from acting as a Server for Internet machines.

But this is a new thing. There is at least 1 application out there that is doing this, and others are reporting this same thing.
Here is another thread with someone with the same problem:
https://www.techrepublic.com/forumqa/thread_detail.jhtml?thread_id=109235

hope this helps

I suggest that you also install and run AdAware from www.lavasoft.de

If any application installs a add driven application, AdAware should help you remove it.

Another option is the proxomatron www.proxomitron.org

Finally, you could look intoa different messenger service.
For personal use, you might give Trillian a try www.ceruleanstudios.com

Chas

So far, the only solutions are...
shut down the windows messaging service..or....
configure your machines through a router or firewall.
These messages are sent to random ip addresses which must be "live" on the internet. In other words, if you have a dhcp server or proxy server doing the real ip on the internet thing, then you are safe.
Techmails recently had an article on this subject, I think it is on cnet news site.
Good luck!

Mike

ps. This has nothing to do with adware or spyware, those programs dealing with their removal will not work in this case.

Just found out that the Proxomitron has a new address.

http://www.spamblocked.com/proxomitron/

It might do what you need.

Chas