Buffer Overrun in Messenger Service Could Allow Code Execution (828035

[Gutes]

This message appeared on my screen as a message form the messenger service. I'm connected through dial-up connection. They sent me a

http://www address

to visit and download a "patch".

http://www.windowspatch.info

does anybody know anything

 

[bcastner]

Absolutely not. This is a scam.
Microsoft does not distribute through email or Messenger hotfixes or notices. Never.

Nothing but the Windows Update Service:

http://www.microsoft.com/windows/downloads/default.mspx

 

[linney]

330904 - Messenger Service Window That Contains an Internet Advertisement Appears

http://support.microsoft.com/default.aspx?scid=kb;en-us;330904

http://www.tacktech.com/display.cfm?ttid=210

 

[linney]

828035 - MS03-043: Buffer Overrun in Messenger Service Could Allow Code Execution

http://support.microsoft.com/default.aspx?scid=kb;en-us;828035&FR=1&PA=1&SD=HSCH

The people who sent you your message have only the intention to sell you a popup blocker for $16.

 

[bcastner]

I feel compelled to note that this "Messenger SPAM" is an indication of a workstation that is not protected by a firewall.

. enable the native XP ICF firewall; or
. download and use the preview of Service Pack 2:

http://www.microsoft.com/technet/prodtechnol/winxppro/sp2preview.mspx

. Or, use a third-party firewall. There are excellent freeware ones available. See linney's links and the general discussion in thread779-793077

It really is not safe to access the internet without a firewall any more, and they should eliminate your Messenger SPAM.

 

[bcastner]

I do find it slightly scary that someone used NET SEND to Messenger SPAM someone about the possible risks of Messenger to one's computer. It seems like a mild form of extortion. Like a thief showing you copies of your house and car keys, and asking for $16.00 not to use them.