DaniWeb IT Discussion Community - Weakness In Messenger Security

This has come into my inbox today from my ISP and I thought I would share it with you.

Hopefully it will prevent anyone having any problems.

Quote:

Dear Customer,
Microsoft have contacted us to tell us about a weakness in their Messenger application, which they supply with Windows 2000 and Windows XP operating systems.

If you are using either of these systems your PC could be vulnerable to a computer virus attack and we thought we should make you aware of Microsoft's warning.

Don't worry though, it is easy to fix!

Microsoft have issued a free update to Windows 2000 and Windows XP and below are simple instructions on how to obtain this upgrade and install it on your PC.

We hope you find this email helpful and thank you for being an NTL Internet customer.

Kindest regards

ntl:home Internet Security

Quick Guide to Protecting your PC

Windows 98, Windows ME and Macintosh users are unaffected by this security risk, and do NOT need to download any additional security patches or updates.

Customers should take the following steps to ensure that they are not impacted by any future virus attack exploiting this weakness by taking the following steps:-

1. Update your machine with the appropriate software update (patch) for your operating system. The links for the various operating systems are listed below. Just click on the link for your operating system, and this will take you directly to the Microsoft Site.

If you are unsure of which Windows operating system you are using, simply:

1. Click Start, and then click Run.

2. In the box, type winver, and then click OK.

The window that appears will show you which version of Windows your computer is using.

The software updates (patches) for the specific versions are as follows:-

Windows XP (Home or Pro):

Quote:

http://www.microsoft.com/downloads/details.aspx?FamilyId=F02DA309-4B0A-4438-A0B9-5B67414C3833&displaylang=en

Windows 2000: http://www.microsoft.com/downloads/details.aspx?FamilyId=99F1B40D-906A-4945-A021-4B494CCCBDE0&displaylang=en

2. Ensure that a Firewall is in place to prevent unauthorised access to your machine. If you do not have Firewall Software a free version is available from http://www.zonealarm.com/ntl

3. Do not open email attachments from anyone you do not recognise or trust.

4. Regularly visit www.windowsupdate.com and check for new updates. It is strongly recommended that you update your computer with any security updates suggested here.

There have been a number of Security Alerts recently, Microsoft have launched a new site to ensure that customers using Microsoft products are kept up to date. Microsoft recommends that customers visit this site regularly to keep up to date. If you have any questions about this please use the "Contact us" link on the site below.

http://www.microsoft.com/security/

For easy reference, Microsoft, have given this a number which is MS03-043. Further information can be found at:-

http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-043.asp