Internet Explorer, by default, is set to prompt you to permit or deny the download of an ActiveX control the first time, in the Internet zone. See Tools/Options/Security, the Internet Zone tab, Custom Settings button.
You can set it to never allow ActiveX control downloads, but if you have to agree the first time for each I can't see any purpose in setting it to Deny.
The behaviour of what is described isn't much different than receving an e-mail that looks like it comes from your computer department, or IBM or Norton, that says you've been infected and have to visit site ZZZ. The attack is an example of human engineering (ie. try to trick the person), and can be foiled easily by being cautious about unexplained messages.
The Messenger service has been in NT for 6/7 years now, long before spam and pop-ups, and responsible for neither, IMO.
Regards, WUWT
Regards WUWT |