Re: MSN messenger buffer overrun affects Win88 too

From: Sarah (anonymous_at_discussions.microsoft.com)
Date: 10/20/03 

Date: Sun, 19 Oct 2003 20:24:47 -0700

So Tom, any idea what is going on to cause the problem
which I describe? Specifically, when I am logged into MSN,
and ONLY when I am logged into MSN (not, say, when I am on
the internet in Internet Explorer) just about every 5
minutes I get an alert from McAffee telling me that there
is a virus alert, Trojan "Exploit-CodeBase) which has
infected a file in application data - and although I
delete the offending file, if I stay logged onto MSN in
about 5 minutes I will get another alert like the first? I
update my virus definitions at least daily and check
Microsoft critical updates at the same time.
>-----Original Message-----
>MSN Messenger and Windows Messenger Service are entirely
different programs.
>Windows Messenger is not available on Win 98.
>
>Tom
>
>"Sarah" <anonymous@discussions.microsoft.com> wrote in
message
>news:010201c3967b$87734c50$a601280a@phx.gbl...
>| The vulnerability described in
>|
http://securityresponse.symantec.com/avcenter/security/Cont
>| ent/8826.html
>| is listed as only affecting Win200, NT and XP. I am
>| writing to report that it also affectes Win98 as well. I
>| am using that Os, a DSL modem (Microsoft1000), MSN
>| messenger 6.0 and MSN version 8.5
>| Every time that I log onto MSN, within 5 minutes McAffee
>| reports a virus (codeBase Exploit), and I choose to
delete
>| it. But 5 minutes later I get the alert again. This ONLY
>| happens when I am logged onto MSN. I am "signed off" MSN
>| messenger to try and stop this, but you can't
just "exit"
>| messenger since it is a integral part of MSN. I update
my
>| virus DATS and check Microsoft Critical updates site at
>| least daily, but no patch exists since it is impossible
to
>| get Microsoft the information that this vulnerability
>| affects Win98. I have treid tech support and they
>| suggested replacing my MSN messenger files, I did and
not
>| surprisinly it didn't help. I try and report this to
>| Microsoft and just get shunted from department to
>| department. I'm not going to pay their incident help
fees
>| to tell them that there is a problem with their system.
>| I'm pretty sure that the repeated attempts to intrude on
>| my system are illegal, but they still seem
disinterested.
>| Can anyone please let Microsoft know that this buffer
over
>| run affects Win98 too, so they will write a patch?
Please?
>
>
>.
>

Relevant Pages