strange zone alarm message

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
thegreatone2176
Forum Contributor
Posts: 102
Joined: Sun Jul 11, 2004 1:27 pm

strange zone alarm message

Post by thegreatone2176 »

http://www.bluelightningblade.com/msn.JPG

Anyone else have this? does msn really install a syshook?
User avatar
hawleyjr
BeerMod
Posts: 2170
Joined: Tue Jan 13, 2004 4:58 pm
Location: Jax FL & Spokane WA USA

Post by hawleyjr »

WOW! Did you recently update or install anything MSN?
User avatar
m3mn0n
PHP Evangelist
Posts: 3548
Joined: Tue Aug 13, 2002 3:35 pm
Location: Calgary, Canada

Post by m3mn0n »

MSN has been known to be the launching pad for various trojans and viruses.
User avatar
shiznatix
DevNet Master
Posts: 2745
Joined: Tue Dec 28, 2004 5:57 pm
Location: Tallinn, Estonia
Contact:

Post by shiznatix »

go msn. would i be vulnerable since i am using trillian?
AngusL
Forum Contributor
Posts: 155
Joined: Fri Aug 20, 2004 4:28 am
Location: Falkirk, Scotland

Post by AngusL »

shiznatix wrote:go msn. would i be vulnerable since i am using trillian?
Not if the viruses hook into the actual MSN Messenger thing. If there are vulnerabilites in the actual protocol, then possibly.
Grim...
DevNet Resident
Posts: 1445
Joined: Tue May 18, 2004 5:32 am
Location: London, UK

Post by Grim... »

MSN stores your conversations - maybe that's what it's picking up?
User avatar
Jenk
DevNet Master
Posts: 3587
Joined: Mon Sep 19, 2005 6:24 am
Location: London

Post by Jenk »

Sounds like what has most likely happened is the msmsgr.exe file has been infected, rather than MSN/MS are trying to track you.

Do a full scan with latest anti-virus and if still worried, delete the actual file and resinstall MSN.
Grim...
DevNet Resident
Posts: 1445
Joined: Tue May 18, 2004 5:32 am
Location: London, UK

Post by Grim... »

AngusL wrote:
shiznatix wrote:go msn. would i be vulnerable since i am using trillian?
Not if the viruses hook into the actual MSN Messenger thing. If there are vulnerabilites in the actual protocol, then possibly.
I'm not convinced that's correct - I think Trillian runs your msn exe through it's own program, because if you delete MSN components, Trillian can't connect...
User avatar
shiznatix
DevNet Master
Posts: 2745
Joined: Tue Dec 28, 2004 5:57 pm
Location: Tallinn, Estonia
Contact:

Post by shiznatix »

BEEEEEP! Wrong! i deleted all my msn messanger and windows messanger off my xp and my trillian runs just dandy with msn and all the others. trillian connects probably just the same as any browser based msn client such as msn2go and whatnot
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

Last I checked, Trillian used the actual MSN application protocols for connection.
User avatar
shiznatix
DevNet Master
Posts: 2745
Joined: Tue Dec 28, 2004 5:57 pm
Location: Tallinn, Estonia
Contact:

Post by shiznatix »

a) i never installed MSN messanger
b) i unistalled windows messanger
c) i uninstalled the MSN thingy, whatever it is.

i deleted all folders in the programs folder that had to do with msn stuff. where would this protocol hide then for tillian to be able to use it?
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

their own implementation...
User avatar
shiznatix
DevNet Master
Posts: 2745
Joined: Tue Dec 28, 2004 5:57 pm
Location: Tallinn, Estonia
Contact:

Post by shiznatix »

then what about the web based clients like msn2go. does that end up using my windows thingy or not? and if not then why would trillian not connect the same way instead of exposing me to threats
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

I have no idea how either are implemented, so I can't comment on that..
Post Reply