MBSA.EXE

After running the baseline security analyser, every time I open Outlook
Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation to
modify.... can't remember the rest of it sorry, but basically it appears to
be using OE to connect to the internet. This doesn't happen after a restart.
The question is, why? After mbsa has been shut down, why does it leave this
application behind? Or am I being too simplistic?
Also asking on the Comodo forums.

Roger
Tue Nov 21 22:36:35 CST 2006

I think you are misinterpreting things.
When MBSA runs it will check if the detection components
are up-to-date, and if not, it updates them. It sounds to me
that your software is detecting that a change was made and
informing you of that fact.
Of course, if you would fill in your "...." perhaps we could
be more specific and lower the guesswork of this.

"markjoy" <markjoy@discussions.microsoft.com> wrote in message
news:13278D08-81E4-42B0-B425-EDD1B03E614A@microsoft.com...
> After running the baseline security analyser, every time I open Outlook
> Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation
> to
> modify.... can't remember the rest of it sorry, but basically it appears
> to
> be using OE to connect to the internet. This doesn't happen after a
> restart.
> The question is, why? After mbsa has been shut down, why does it leave
> this
> application behind? Or am I being too simplistic?
> Also asking on the Comodo forums.

markjoy
Wed Nov 22 00:05:01 CST 2006

Thanks for the response, Roger, but I don't think so, as everything is
totally up to date...installed mbsa just as a double check, to be sure. If it
happens again, I'll try and take a screenshot of it so as to be able to pass
on the exact message. It was pretty close to "..has used OLE automation to
alter the way ## connects to the internet ". If it had updated any software
or patched anything, wouldn't I be informed of that? XP home SP2.

"Roger Abell [MVP]" wrote:

> I think you are misinterpreting things.
> When MBSA runs it will check if the detection components
> are up-to-date, and if not, it updates them. It sounds to me
> that your software is detecting that a change was made and
> informing you of that fact.
> Of course, if you would fill in your "...." perhaps we could
> be more specific and lower the guesswork of this.
>
> "markjoy" <markjoy@discussions.microsoft.com> wrote in message
> news:13278D08-81E4-42B0-B425-EDD1B03E614A@microsoft.com...
> > After running the baseline security analyser, every time I open Outlook
> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation
> > to
> > modify.... can't remember the rest of it sorry, but basically it appears
> > to
> > be using OE to connect to the internet. This doesn't happen after a
> > restart.
> > The question is, why? After mbsa has been shut down, why does it leave
> > this
> > application behind? Or am I being too simplistic?
> > Also asking on the Comodo forums.
>
>
>

Roger
Wed Nov 22 07:30:47 CST 2006

Then you may be correct. It is all in that "..."
MBSA was however just recently uprev'd to MBSA 2.0.1


"markjoy" <markjoy@discussions.microsoft.com> wrote in message
news:6B4F648C-A6CA-4824-A2E2-F6DB197AE840@microsoft.com...
> Thanks for the response, Roger, but I don't think so, as everything is
> totally up to date...installed mbsa just as a double check, to be sure. If
> it
> happens again, I'll try and take a screenshot of it so as to be able to
> pass
> on the exact message. It was pretty close to "..has used OLE automation to
> alter the way ## connects to the internet ". If it had updated any
> software
> or patched anything, wouldn't I be informed of that? XP home SP2.
>
> "Roger Abell [MVP]" wrote:
>
>> I think you are misinterpreting things.
>> When MBSA runs it will check if the detection components
>> are up-to-date, and if not, it updates them. It sounds to me
>> that your software is detecting that a change was made and
>> informing you of that fact.
>> Of course, if you would fill in your "...." perhaps we could
>> be more specific and lower the guesswork of this.
>>
>> "markjoy" <markjoy@discussions.microsoft.com> wrote in message
>> news:13278D08-81E4-42B0-B425-EDD1B03E614A@microsoft.com...
>> > After running the baseline security analyser, every time I open Outlook
>> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE
>> > automation
>> > to
>> > modify.... can't remember the rest of it sorry, but basically it
>> > appears
>> > to
>> > be using OE to connect to the internet. This doesn't happen after a
>> > restart.
>> > The question is, why? After mbsa has been shut down, why does it leave
>> > this
>> > application behind? Or am I being too simplistic?
>> > Also asking on the Comodo forums.
>>
>>
>>

markjoy
Wed Nov 22 15:43:01 CST 2006

Just re-read your first reply. If the "detection components" for mbsa were
updated, is it true that I might not receive an advisory of that? Once it
runs, it advises of any deficiencies, as you know, but leaves it to the user
to correct these, true? So possibly the updated components (An Actvex
control?) could have lead to this. Just tried to recreate the problem.
Couldn't. Probably because notheing had been altered.
Thanks for the replies.

"Roger Abell [MVP]" wrote:

> Then you may be correct. It is all in that "..."
> MBSA was however just recently uprev'd to MBSA 2.0.1
>
>
> "markjoy" <markjoy@discussions.microsoft.com> wrote in message
> news:6B4F648C-A6CA-4824-A2E2-F6DB197AE840@microsoft.com...
> > Thanks for the response, Roger, but I don't think so, as everything is
> > totally up to date...installed mbsa just as a double check, to be sure. If
> > it
> > happens again, I'll try and take a screenshot of it so as to be able to
> > pass
> > on the exact message. It was pretty close to "..has used OLE automation to
> > alter the way ## connects to the internet ". If it had updated any
> > software
> > or patched anything, wouldn't I be informed of that? XP home SP2.
> >
> > "Roger Abell [MVP]" wrote:
> >
> >> I think you are misinterpreting things.
> >> When MBSA runs it will check if the detection components
> >> are up-to-date, and if not, it updates them. It sounds to me
> >> that your software is detecting that a change was made and
> >> informing you of that fact.
> >> Of course, if you would fill in your "...." perhaps we could
> >> be more specific and lower the guesswork of this.
> >>
> >> "markjoy" <markjoy@discussions.microsoft.com> wrote in message
> >> news:13278D08-81E4-42B0-B425-EDD1B03E614A@microsoft.com...
> >> > After running the baseline security analyser, every time I open Outlook
> >> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE
> >> > automation
> >> > to
> >> > modify.... can't remember the rest of it sorry, but basically it
> >> > appears
> >> > to
> >> > be using OE to connect to the internet. This doesn't happen after a
> >> > restart.
> >> > The question is, why? After mbsa has been shut down, why does it leave
> >> > this
> >> > application behind? Or am I being too simplistic?
> >> > Also asking on the Comodo forums.
> >>
> >>
> >>
>
>
>