Is Messenger Safe

I would be grateful for some advice on the version of messenger offered on Window's update site. I always thought of messenger to be security risk and this was the reason we see the advice to 'shoot the messenger' therfore have never used it.

I have now been asked to install this as part of a group who need to use this for contact (not just fun) but I am very worried that by doing so I may be risking my secure computer. I hope someone can enlighten me as to this form of talking on the Internet and if I would be best not to install the one Microsoft is offering on the site

Thank you in advance for any help.

 

miniB--I am sure it is safe, but some Messengers can be a nuisance.
There are three different programs.
Messenger Service, MSN Messenger and Windows Messenger.
The differences are more or less explained in the third paragraph here
http://messenger.msn.com/Help/Issues.aspx
As you can see, Messenger Service is a well-known provider of spam pop-ups, although that was not what it was supposed to do.
http://www.lavahelp.com/articles/v6/03/05/0302.html
http://support.microsoft.com/default.aspx?scid=330904
A quote from the second article says "The Messenger Service is not related to your Web browser, e-mail program, Windows Messenger, or MSN Messenger." Source of Messenger Service
http://www.grc.com/stm/shootthemessenger.htm

There are Messenger Service removal tools for all WinOS's except Win98. Among which
http://www.dougknox.com/xp/tips/xp_messenger_remove.htm

MSN Messenger, is a legitimate MS supplied messenger service.
http://messenger.msn.com
Any one can get MSN Messenger, and it can be uninstalled from Control Panel|Add/Remove Programs.

As you have seen from the first reference, Windows Messenger is not the same as MSN Messenger.
Comparison of these from MSN Messenger Help
http://messenger.msn.com/Help/
In Outlook Express Tools|Options|General tab, you can opt to have Windows Messenger not run at boot.

 

Many, many thnks for all of this information Jim. I am really pleased to have such a wealth of information you have found for me, as these are excatly the things I need to know before making my decision.

Your added comments will be of great help as I study each link individually. I am quite amused that shoot the messenger was not actually this one that I have shot as I was mis-informed that was the one I had shot

I will take time to compare MSN messenger / the one offered by Micorsoft. You really have gone the extra mile to gather all of this information which I really do appreciate.

I will have a lot of reading to do now & then to decide if I am going to be plauged with anything by installing a messenger on my computer.

Thanks again for all you hard work.

 

miniB--You are most welcome. I am pleased I could help. Of course there are other non-MS Messengers out there, so beware!

 

Thanks Jim, I am very cautious about using anything like this and will take extra care when I have decided. If it is considered absolutely necessary for me to use this then I will try it on my laptop before I use anything like this on my main PC.
I am not even sure if my security will like it as I have my Firewall set securely plus I have my router firewall. If it means that I would have to risk any of this I may well retract my decision, no matter who has asked me to use this service.

I am still reading and learning and thanks to you I really do have all the information that I require

 

I use MSN Messenger and AOL Instant Messenger (AIM). I figure they're both pretty safe as long as you practice safe computing: good strong firewall and up-to-date antivirus. Windows Messaging service is that annoying piece of **** that sends spam popups. It can be disabled in Admin Tools>Services. MSN Msg doesn't spam and you can block anyone who harasses you, same in AIM.

 

Hi

I have tried msn out on my laptop today but I am not able to change the e-mail account this is using as it is greyed out It is using another e-mail and says 'not verified' - I have gone through the verify process but it has not updated my MSN account I would be grateful if you would advise on what I should be do I need to re-install it now that I have the hotmail account?

 

miniB--I do not run MSN or Hotmail, so cannot help.
However, I suggest you post this new question in the "Other Internet Software" Forum since the subject has now changed from a Security issue.

 

Hi MiniB,

If you have not set up a Passport account, then you need to do so.

I just signed up for MSN Messenger a couple of weeks ago and everything went very smoothly. I clicked sign on using passport and away we go.

Now for your question, is it safe.

The answer is that depends. It is all a manner of trust.

Are you aware that none of your security software covers any MSN Messenger, Instant Messenger, Yahoo Messenger, etc.

Security software includes anti-virus and firewall software. So far the AV "scum" writers have not focused on this area. That may not last forever.

You can control who you are contacting through these vehicle, so only use MSN Messenger or any other like service with people that you know and trust. Although files can be sent using MSN Messenger, make it a practice NOT to accept files from anybody this way. Have the file sent to via email, where your security products are on guard.

That is my advice for an individual. However if this was a company, I would advise that this only be used internally between employees. IMO, there is too much risk to allow this tool to be used between companies, even companies that you are partnered with. An enterprise has a lot more to lose if some form of malware gets in this way.

I also want to compliment you on asking the question, is this safe. Most people just start using this tool from any of these vendors without thinking or they are operating under the impression that their AV and firewall will protect them.

I also want to make clear that this is a problem that is applicable to all of the vendors of this type of tool.

Regarding my own use, I am using MSN Messenger on a very limited basis and my use pertains to a development project that I am working on. Everyone on the project is very busy and this is a way to get faster answers than trying to reach them by phone or email. Once this project is completed, I will probably go back to not using this type of tool.

Cheers,

Linda

 

At an MSDN seminar this past week, I asked this question and the response above is in essence what they replied.

I am using MSN Messenger 6.0.x, which is not included in NAV 2004 according to your post.

I don't use NAV anymore so I am not familiar with NAV 2004. If they are doing this, do you know how? What triggers the AV?

Could something (code) posted in the chat session trigger NAV? Or is NAV being triggered during the download of an attachment from a Messenger friend?

My next question would be has any of the tech publications reviewed this as to its effectiveness.

I guess firewall software is now going to have to be enhanced to protect this area as well.

Thanks for the response. I am here because Steve Jones was selected as a Microsoft MVP on this board. Steve is also a moderator on VirtualDR.com, which is where I know him from.

Cheers,

Linda

 

This is a quote from the latest PC Magazine review of NAV 2004:

"Also new is protection for instant message–borne threats in Yahoo! Messenger, MSN/ Windows Messenger, and AIM. "

Based on the review, it does not appear that they did any testing of this functionality. In addition, all of the posts from users of NAV 2004 were extremely negative. They ranged from "This is the buggiest software ever to lots and lots of complaints about the new NAV activation.

There is also limited info at the Symantec site.

Linda

 

Many thanks Linda for your very imformative reply and words of caution. I am at present testing the use of this software mainly as a tool that I can be contacted by other group members (few in number) when we all all need to be informed about something together. I have already taken all the file sharing aspects out of the options as even if they are friends there is no way I would take this risk at all. I do not have any shared files/folders o my computer either.

I will be as secure as possible while I 'make my mind up' as to my prolonged use of this. To date I have only used it for instant contact with the group and as a little relief to chat with my sister.

I have scanned my computer repeatedly since installing msn with every scanner I have installed; I also only permit access when I know I need to with my software firewall (I do not let it remember this rule) I make sure to sign out completely and exit when I am not at my PC plus have unchecked 'act as server' within my Firewall (I also have a router firewall)

The first sign that anything could be a risk I will be the first to remove this even though I have had a little fun with chatting to family members. I am one who is considered too stringent regarding my security but it is very important to me thus my initial question.

I appreciate all input to this post and also send my congratulations to all the new MVP's I have just noted on the forum today Well done PeteC as you have been more than help to me in the past as have the other new MVP's. A great forum for solid help and advice