Microsoft Messenger Info and Help

Never rec'd a response to a couple posts in regards to a
mysterious "Microsoft Messenger" pop up. It was telling
me I had to update to use. I used the "what's new"
button, which was a microsoft website, so I updated and
BOOM! It took down my Norton Virus Dectection and email
scan. Any ideas how to fix the problem, and do you know
of any other problems I might encure?

Has anyone ever heard of this type of virus, attack, ect?

D.Jones

Bill
Tue Oct 21 18:05:22 CDT 2003

I think we need more precise information. You got a mysterious popup, and
so of course, you just HAD to do what it said?

Can you tell us the name or number of the update that you applied?

There might be several things going on here--NAV being disabled can
definitely be a sign of a virus infection.

One thought would be to use a third-party online scan to verify whether or
not you are infected with something: http://housecall.antivirus.com for
example.

"Help" <anonymous@discussions.microsoft.com> wrote in message
news:04c001c3981c$d214a360$a301280a@phx.gbl...
> Never rec'd a response to a couple posts in regards to a
> mysterious "Microsoft Messenger" pop up. It was telling
> me I had to update to use. I used the "what's new"
> button, which was a microsoft website, so I updated and
> BOOM! It took down my Norton Virus Dectection and email
> scan. Any ideas how to fix the problem, and do you know
> of any other problems I might encure?
>
> Has anyone ever heard of this type of virus, attack, ect?
>
> D.Jones

Bill
Wed Oct 22 18:29:48 CDT 2003

I'm glad you're OK and things are back to normal. At this point, I wonder
whether you did, in fact, download a genuine Microsoft Messenger patch or
updated version. There has definitely been something along these lines
offered recently.

It isn't at all impossible that this update and your experience with the
antivirus are not directly connected.

For example: I have a client who called me in deep distress. He'd applied
several Microsoft security updates to his WinMe machine, which normally runs
24x7. They required a reboot. Upon reboot, he got a red and blue dos error
message from NAV about corrupt definition files, and could only start in
safe mode.

His conclusion: Security patches killed my machine.

What actually happened (after some detective work:) Using the System
Restore feature under WinMe with NAV 2002 installed can cause this issue,
and, in fact, did. Symantec has a special tool to clean up the mess. In
fact, the occurrence had nothing to do with the security fixes, other than
that they prompted the reboot--any reboot would have had the same result.

At any rate, glad your machine is fine, and thanks for trying to warn
others.


"d.jones" <anonymous@discussions.microsoft.com> wrote in message
news:0e6f01c398a8$b58cff30$a301280a@phx.gbl...
> I appreciate the help, I really do, but NO, I did not have
> to do anything. I knew it was a risk. I removed Norton
> Security and re-installed. Ran virus check, spybot, Laval,
> and Hijack this. ALL showed Nothing. Everything is
> working fine now.
>
> It was a window titled "Microsoft Messenger". Prompted me
> for udpdate. Would not go away. The "what's new" button
> was actually for Microsoft Messenger website. Since this
> part of the window was ligit, I assumed the entire box was
> as well. Wrong. These guys prey off of people that know
> just enough to get themselves in trouble (me).
>
> Again, thanks for the help.

alun
Mon Nov 03 10:48:01 CST 2003

In article <0afb01c399a4$335b8cf0$a001280a@phx.gbl>, "David" <david@westholme2.fsnet.co.uk> wrote:
>I have the same pop-up invitation to update Messenger
>everytime I go on line (freeserve), fortunately I haven't
>accepted the invitation. Does anyone know how to get rid
>of the pop-up please??

Yes.

Go update your Windows Messenger.

While you should definitely follow the advice that any random popup you
receive should be treated with distrust and scorn, if you get a popup
advising you that there's a free update to a program you use, then obviously
you should get that free update. Not by clicking on the popup, oh no,
because as discussed before, popup messages come from all sorts of places,
and can _not_ be trusted. But by visiting the Windows Messenger site:

http://www.microsoft.com/windows/messenger

My own personal experience suggests that WM 5.0 doesn't always work right -
and indeed, the "download" page from the Windows Messenger site lists a
download for 4.7 for Windows XP.

If the popups continue _after_ you have upgraded, well, you know you have a
virus or a trojan, or some spyware, or something else nefarious generating
that message. Then you can pursue other means.

But, given that MS disabled Windows Messenger access for older versions
(due, apparently, to a security flaw in those versions), and that they did
so only in the last three weeks, it would seem prudent to at least try an
official update.

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]
--
Texas Imperial Software | Find us at http://www.wftpd.com or email
1602 Harvest Moon Place | alun@texis.com.
Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.

Bill
Sun Nov 09 13:24:00 CST 2003

I can (belatedly) agree with this advice. Upgrade your old version of
Messenger.

The pop-up is legitimate, and the code you have is dangerously flawed, which
is the reason for the forced upgrade.

Upgrade by going to the web site to be absolutely certain what you are
getting is legitimate.

"Alun Jones [MS MVP]" <alun@texis.com> wrote in message
news:5Fvpb.1345$903.951@newssvr24.news.prodigy.com...
> In article <0afb01c399a4$335b8cf0$a001280a@phx.gbl>, "David"
<david@westholme2.fsnet.co.uk> wrote:
> >I have the same pop-up invitation to update Messenger
> >everytime I go on line (freeserve), fortunately I haven't
> >accepted the invitation. Does anyone know how to get rid
> >of the pop-up please??
>
> Yes.
>
> Go update your Windows Messenger.
>
> While you should definitely follow the advice that any random popup you
> receive should be treated with distrust and scorn, if you get a popup
> advising you that there's a free update to a program you use, then
obviously
> you should get that free update. Not by clicking on the popup, oh no,
> because as discussed before, popup messages come from all sorts of places,
> and can _not_ be trusted. But by visiting the Windows Messenger site:
>
> http://www.microsoft.com/windows/messenger
>
> My own personal experience suggests that WM 5.0 doesn't always work
right -
> and indeed, the "download" page from the Windows Messenger site lists a
> download for 4.7 for Windows XP.
>
> If the popups continue _after_ you have upgraded, well, you know you have
a
> virus or a trojan, or some spyware, or something else nefarious generating
> that message. Then you can pursue other means.
>
> But, given that MS disabled Windows Messenger access for older versions
> (due, apparently, to a security flaw in those versions), and that they did
> so only in the last three weeks, it would seem prudent to at least try an
> official update.
>
> Alun.
> ~~~~
>
> [Please don't email posters, if a Usenet response is appropriate.]
> --
> Texas Imperial Software | Find us at http://www.wftpd.com or email
> 1602 Harvest Moon Place | alun@texis.com.
> Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers.
> Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.