I need help.thanks

Archived from groups: comp.security.firewalls (More info?)

"xxx" <xxx@nospam.com> wrote in message
news:Sidqc.25664$325.636450@news20.bellglobal.com...
> Hi , the other day I started to get this message from
> mcafee.Exploit-Codebase.gen virus...How do I get rid of this I cannot
> delete it.,
> I'm using winxp corporate version and ie ver 6.0 something with sp1.
> Any help would be appreciated.
>

Call me stupid.. but this message came from your McAfee AV on your PC?..

If so, my guess is you don't have to do anything.. the anti-virus software
has blocked the 'attempted infection and the pop-up is informing you that it
has been blocked.

This is a web-site or e-mail based attack.. this could indicate that you
were surfing a little on the darker side of the internet... Solution.. don't
go hunting for free porn, illegal software cracks and the like it can be
costly..
If it's e-mail based and your using OE try switching to Outlook, the McAfee
can directly scan e-mail inside the outlook PST file and detect and block
such items before they even try to be opened..

This also implies that you haven't done the security updates..
Without fail (do not pass go, do not collect $200) go to
http://v4.windowsupdate.microsoft.com/en/default.asp
do all the updates... scan again.. etc..
Also do the office updates..

see mcafee http://vil.nai.com/vil/content/v_99383.htm for details of
exploit-codebase

This is a generic detection of malware which tries to exploit a Microsoft
Internet Explorer vulnerability, which was discovered February 25, 2002.
This exploit could result in an executable file being run without the user's
permission or knowledge, when visiting a web page or viewing HTML email
message. This affects Internet Explorer 4.x and higher, Microsoft Outlook,
and Microsoft Outlook Express.
This vulnerability has incorrectly been called the "Popup Object
Vulnerabilty", the "Data Source Object Vulnerability", the "XMLid Exploit",
or the "DynHTML Exploit" but these are just the methods to insert the
exploit into the HTML. The vulnerability occurs because Internet Explorer
allows HTML in the "Internet Zone" to launch programs in the "My Computer
Zone".

A patch is available from Microsoft here