MBSA.EXE

Secure Home | Search | About

Lost Password?

Microsoft Applications Security

get this group's latest topics as an RSS feed

add this group's latest topics to your My MSN content

add this group's latest topics to your My Yahoo content

add this group's latest topics to your Google content

Subject

Author

Date

MBSA.EXE

markjoy

11-21-2006

Roger Abell [MV...

mar

Roger Abell [MV...

mar

Posted by =?Utf-8?B?bWFya2pveQ==?= on November 21, 2006, 7:36 pm

If you were Registered and logged in, you could reply and use other advanced thread options

After running the baseline security analyser, every time I open Outlook
Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation to
modify.... can't remember the rest of it sorry, but basically it appears to
be using OE to connect to the internet. This doesn't happen after a restart.
The question is, why? After mbsa has been shut down, why does it leave this
application behind? Or am I being too simplistic?
Also asking on the Comodo forums.

Posted by Roger Abell [MVP] on November 21, 2006, 11:36 pm

If you were Registered and logged in, you could reply and use other advanced thread options

I think you are misinterpreting things.
When MBSA runs it will check if the detection components
are up-to-date, and if not, it updates them. It sounds to me
that your software is detecting that a change was made and
informing you of that fact.
Of course, if you would fill in your "...." perhaps we could
be more specific and lower the guesswork of this.

> After running the baseline security analyser, every time I open Outlook

> Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation

> to

> modify.... can't remember the rest of it sorry, but basically it appears

> to

> be using OE to connect to the internet. This doesn't happen after a

> restart.

> The question is, why? After mbsa has been shut down, why does it leave

> this

> application behind? Or am I being too simplistic?

> Also asking on the Comodo forums.

Posted by =?Utf-8?B?bWFya2pveQ==?= on November 22, 2006, 1:05 am

If you were Registered and logged in, you could reply and use other advanced thread options

Thanks for the response, Roger, but I don't think so, as everything is
totally up to date...installed mbsa just as a double check, to be sure. If it
happens again, I'll try and take a screenshot of it so as to be able to pass
on the exact message. It was pretty close to "..has used OLE automation to
alter the way ## connects to the internet ". If it had updated any software
or patched anything, wouldn't I be informed of that? XP home SP2.

"Roger Abell [MVP]" wrote:

> I think you are misinterpreting things.

> When MBSA runs it will check if the detection components

> are up-to-date, and if not, it updates them. It sounds to me

> that your software is detecting that a change was made and

> informing you of that fact.

> Of course, if you would fill in your "...." perhaps we could

> be more specific and lower the guesswork of this.

> > After running the baseline security analyser, every time I open Outlook

> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE automation

> > to

> > modify.... can't remember the rest of it sorry, but basically it appears

> > to

> > be using OE to connect to the internet. This doesn't happen after a

> > restart.

> > The question is, why? After mbsa has been shut down, why does it leave

> > this

> > application behind? Or am I being too simplistic?

> > Also asking on the Comodo forums.

Posted by Roger Abell [MVP] on November 22, 2006, 8:30 am

If you were Registered and logged in, you could reply and use other advanced thread options

Then you may be correct. It is all in that "..."
MBSA was however just recently uprev'd to MBSA 2.0.1

> Thanks for the response, Roger, but I don't think so, as everything is

> totally up to date...installed mbsa just as a double check, to be sure. If

> it

> happens again, I'll try and take a screenshot of it so as to be able to

> pass

> on the exact message. It was pretty close to "..has used OLE automation to

> alter the way ## connects to the internet ". If it had updated any

> software

> or patched anything, wouldn't I be informed of that? XP home SP2.

> "Roger Abell [MVP]" wrote:

>> I think you are misinterpreting things.

>> When MBSA runs it will check if the detection components

>> are up-to-date, and if not, it updates them. It sounds to me

>> that your software is detecting that a change was made and

>> informing you of that fact.

>> Of course, if you would fill in your "...." perhaps we could

>> be more specific and lower the guesswork of this.

>> > After running the baseline security analyser, every time I open Outlook

>> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE

>> > automation

>> > to

>> > modify.... can't remember the rest of it sorry, but basically it

>> > appears

>> > to

>> > be using OE to connect to the internet. This doesn't happen after a

>> > restart.

>> > The question is, why? After mbsa has been shut down, why does it leave

>> > this

>> > application behind? Or am I being too simplistic?

>> > Also asking on the Comodo forums.

Posted by =?Utf-8?B?bWFya2pveQ==?= on November 22, 2006, 4:43 pm

If you were Registered and logged in, you could reply and use other advanced thread options

Just re-read your first reply. If the "detection components" for mbsa were
updated, is it true that I might not receive an advisory of that? Once it
runs, it advises of any deficiencies, as you know, but leaves it to the user
to correct these, true? So possibly the updated components (An Actvex
control?) could have lead to this. Just tried to recreate the problem.
Couldn't. Probably because notheing had been altered.
Thanks for the replies.

"Roger Abell [MVP]" wrote:

> Then you may be correct. It is all in that "..."

> MBSA was however just recently uprev'd to MBSA 2.0.1

> > Thanks for the response, Roger, but I don't think so, as everything is

> > totally up to date...installed mbsa just as a double check, to be sure. If

> > it

> > happens again, I'll try and take a screenshot of it so as to be able to

> > pass

> > on the exact message. It was pretty close to "..has used OLE automation to

> > alter the way ## connects to the internet ". If it had updated any

> > software

> > or patched anything, wouldn't I be informed of that? XP home SP2.

> >

> > "Roger Abell [MVP]" wrote:

> >

> >> I think you are misinterpreting things.

> >> When MBSA runs it will check if the detection components

> >> are up-to-date, and if not, it updates them. It sounds to me

> >> that your software is detecting that a change was made and

> >> informing you of that fact.

> >> Of course, if you would fill in your "...." perhaps we could

> >> be more specific and lower the guesswork of this.

> >>

> >> > After running the baseline security analyser, every time I open Outlook

> >> > Express, my firewall (Comodo) alerts that mbsa.exe has used OLE

> >> > automation

> >> > to

> >> > modify.... can't remember the rest of it sorry, but basically it

> >> > appears

> >> > to

> >> > be using OE to connect to the internet. This doesn't happen after a

> >> > restart.

> >> > The question is, why? After mbsa has been shut down, why does it leave

> >> > this

> >> > application behind? Or am I being too simplistic?

> >> > Also asking on the Comodo forums.

> >>

Similar Threads	Posted
MBSA 2.0 offline catalog discontinued - MBSA 2.0 will report "The catalog file is damaged or an invalid catalog"	March 27, 2007, 9:07 pm
MBSA 2.0	August 17, 2005, 6:12 am
re MBSA	March 28, 2007, 6:58 am
Nessus vs MBSA	July 27, 2005, 11:57 am
MBSA 1.2.1 End of Life Q&A	February 17, 2006, 2:07 pm
MBSA 2.1 Beta 2 Now Available	May 9, 2007, 6:25 pm
MBSA 2.1 RELEASED	May 5, 2008, 7:59 pm
MBSA 1.2.1 end-of-life statement	February 14, 2006, 1:25 pm
MS07-002 Not Detected by MBSA 2?	January 10, 2007, 3:07 pm
How does MBSA collect it's data?	September 4, 2007, 3:36 am

The site map in XML format XML site map