Said the machine 64.4.56.7(dav.hotmail.com) changed my
local file %program files%\outlook express\msimn.exe
I found this machine is Microsoft machine, why MS change
my file without asking me first?
Nick

Re: another attack by Super_Geek

Super_Geek
Sun Jun 29 13:53:28 CDT 2003

nick <npwMa@yahoo.com> asks a question to do with PCs, Super_Geek dives
in and tries to help:
>Said the machine 64.4.56.7(dav.hotmail.com) changed my
>local file %program files%\outlook express\msimn.exe
>I found this machine is Microsoft machine, why MS change
>my file without asking me first?
>Nick


It is unlikely Ms changed this. Remember that this file is one of the
protect files. This means if it is altered or deleted it is restored
from backup in 3 seconds, annoyingly.
If it is a remote attack, you'll be wanting to get a firewall and do a
full virus scan:


FIREWALLS
==========
www.agnitum.com, www.kerio.com and www.sygate.com, all free.
WinXp firewall info:
http://www.microsoft.com/security/articles/firewall.asp



ONLINE VIRUS SCAN
==================
Panda:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
[link is long and may wrap]
AND

HouseCall:
http://housecall.trendmicro.com/
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

General:
http://securityadmin.info/faq.htm#harden

HTH
--
Super_Geek, 16
"How do I set a laser printer to stun?"
-My website is currently under construction, but I'll post a link here soon forFAQs.

Re: another attack by Alan

Alan
Tue Jul 01 06:10:59 CDT 2003

nick <npwMa@yahoo.com> wrote:
> Said the machine 64.4.56.7(dav.hotmail.com) changed my
> local file %program files%\outlook express\msimn.exe
> I found this machine is Microsoft machine, why MS change
> my file without asking me first?
> Nick

Again you appear to be completely misreading these log messages. Have you
read the documentation for the program that is producing these?

Do you read email from your Hotmail account in Outlook Express: that's what
the message is likely telling you.
--
Alan J. McFarlane
http://homepage.ntlworld.com/alanjmcf/
Please follow-up in the newsgroup for the benefit of all.