COMMAND

    MSN Messenger

SYSTEMS AFFECTED

    MSN Messenger Service 1.0

PROBLEM

    MSN Messenger Service  allows users to  save their email  password
    using the "Save this password so you don't have to enter it  every
    time  you  log  on"  checkbox  when  try to logon in the Messenger
    Service.  The  email and the  password are stored  in the registry
    key

        KEY_CURRENT_USER\Identities\{9C53B920-A2E8-11D1-A59D-008048B12C6E}\Software\Microsoft\MessengerService\PasswordMSN Messenger Service

    {9C53B920-A2E8-11D1-A59D-008048B12C6E} this change in all machines

    With the MessengerServiceEmailPasswordDumper 1.0 this  information
    can be decripted.  MessengerServiceEmailPasswordDumper 1.0  binary
    for i386 or source code can be obtained via:

    http://wwww.ussrback.com/MSNMS10/

SOLUTION

    If a user does not check the 'Save this password.