Question about "Security Bulletin"

[Gini B]

I'm brand new to Windows XP, just got it installed last
week. I've received a "message from Microsoft Networks"
twice today saying "Buffer overrun in Messenger service
could allow code execution (828035). Then says "your
system is affected" and gives a "download patch" website
to go to.

I'm very skeptical. Just had 18 viruses removed from my
PC. Norton 2004 says nothing is wrong. Is this message
legit?

Please advise.

Gini B.

 

[Jonathan Kay [MVP]]

Greetings Gini,

This is a real problem and there is a real patch, however what the link could be referring to
could be a virus. I'd suggest that if you haven't already, you visit WindowsUpdate:
http://windowsupdate.microsoft.com
and have it download and install all the critical updates (the patch for this particular
issue is part of these updates).

Also, you may want to turn off the Messenger Service (note that this will *not* affect
Windows Messenger or MSN Messenger), by clicking Start, then Run, type "services.msc"and
click OK. Scroll down to "Messenger", select it, right-click and then choose Properties.
Under startup type, choose 'Disabled' and then choose the 'Stop' button. After the service
is stopped, click OK. Nothing in Windows or any real third-party applications should be
effected by this.

Finally, you may want to turn on your Internet Connection Firewall for maximum protection.
To do so, click Start, then All Programs, then Accessories, then Communications and then
Network Connections. Then, right click your network/internet connection, then click
Properties. Click the Advanced Tab, and verify that the Internet Connection Firewall is
checked.
____________________________________________
Jonathan Kay
Microsoft MVP - Windows Messenger/MSN Messenger
Associate Expert
http://www.microsoft.com/windowsxp/expertzone/
Messenger Resources - http://messenger.jonathankay.com