Re: Windows Messenger Pop-up spam

["Michael Painter" <tvhawaii () shaka com>]

----- Original Message ----- 
From: "Ansgar -59cobalt- Wiechers" <bugtraq () planetcobalt net>
To: <security-basics () securityfocus com>
Sent: Wednesday, December 08, 2004 4:57 PM
Subject: Re: Windows Messenger Pop-up spam

[snip]

> > You need to think in terms of users who aren't as savvy as you.  You
> are putting absolutley no outbound checks in place.

Those checks are useless if the malware isn't as braindead as Personal
Firewalls are. Like I said above: it takes 25 LoC to sneak around them.
*All* of them.<<

Could you talk a little more about this?
ZoneAlarm Pro alerts me when IE6 has been changed, so I'd like to understand exactly what you're saying (not asking for 
the code,
btw.<g>)

Thanks,

--Michael