Strange Problem on MSN - Virus possible?

Ubercharged · 01-24-09 at 02:11 AM

My friend keeps randomly sending me messages offline when she inst even signed in herself saying stuff like

[herscreenname] check out these awesome pics from the awesome party LOL   http://[myscreenname].zopblob.com

I think it dodgy and i know better than to follow these links, i just wonder'd if anyone knew whats been causing it, i've got malwarebytes scanning me at the moment but not sure what my friend has or if they have any anti-virus for that matter.

Help would be great!

LinBehKaLuGong · 01-24-09 at 03:49 AM

Their account was apparently taken over by a virus-bot that runs that account whenever it wants or at the bastard-who-created-it's discretion. If you don't click on that link it will be okay, no scanning needed. Just inform your friend if the rate of sending these virus laden messages increase until the annoying point and ask her to re-register another account. I've encountered many such incidents from my other friends who also send me such idiotic virus messages, be it whether they are online or not.

As far as I am aware of, the bot-virus attaches itself to the infected account and therefore it doesn't stay in your PC. In fact it is sort of like a hack already because the bot-virus has the username and password and even if you are offline by yourself the bot-virus can still sign in and send crappy messages to your contacts.

**macbooklemon** · 01-24-09 at 03:55 AM

Indeed, it is a virus which distributes itself through these messages which it sends to everyone in the MSN contact list of the infected user. The person clicks on the link, and it infects another and so on.
Its a pain in the arse. Creating a new account will not solve this! The infected user must remove the virus from their system.

lost411 · 01-24-09 at 03:56 AM

This is not a virus at all. Thats a big claim for no proof at all, and you are wrong.

Code: Select All

http://apple.zopblob.com/

read the actual terms of use, underneath the signed in page, explains everything, most people are to stupid to do such a thing though. I think if he changed his password that the problem would dissolve.

**PunKeD_GuRu** · 01-24-09 at 08:03 AM

I don't know of this one specific

but i'm aware on how to make them

Theres a few ways it normally happens
you sign in, you click the link
the link can sometimes send you a file, that the n00b will open... (dont ever accept .exe's unless the person is actually talking to u)
the .exe will send your contact list file to the main server, and the server spams people masking ur name, (easily done, like sending fake emails without having a sender, or simpl typing in a different sender, easy with php)
other systems, your simply just logging into there website with your msn details
and when it does, your contact list is imported to their pc..
and they use there system to spam people their links

Often changing your password can fix alot of it...
but sometimes it's just to late and your need to have people block/delete that contact.

**navarreli** · 01-24-09 at 09:28 AM

I agree with macbooklemon, it is a virus indeed, it changes using common phrases and websites like facebook and myspace, saying that he/she has posted a new pic of you on FB click here to see...It sends you a instant msg, then the sender disconnects, when u afk and get back to your pc you'll see a bunch of msgs from the person infected, as he/she continues to send these messages more people in your contact list will get infected and will be pretty annoying, you will consider to start blocking friends cause these messages
Unisntall msn, delete old folder where msn was installed to, remove registry entries and install again.

Eclair · 01-24-09 at 12:08 PM

Seems like a virus to me, one that takes on the name of one
of your contacts to make you think it is really from your friend.
I would suggest re-installing the program and maybe even
changing your password, just in case you were hacked.

**macbooklemon** · 01-24-09 at 12:19 PM

Quote: Originally Posted by lost411

This is not a virus at all. Thats a big claim for no proof at all, and you are wrong.

Code: Select All

http://apple.zopblob.com/

read the actual terms of use, underneath the signed in page, explains everything, most people are to stupid to do such a thing though. I think if he changed his password that the problem would dissolve.

Ok, didn't know about that one. However, there is one that is a virus. It uses the Plus! Extension to do exactly that. However it was easy to remove.
obviously, someone else has taken the same idea to promote whatever they are doing. =]

Ubercharged · 01-25-09 at 04:03 AM

Cheers for the advice guys, I had a word yesterday and she said it hadden done this in ages but she thinks it came from someone elses computer that she knows. I'll do my best to sort it either way , thanks again guys

Cant believe that by the way

Quote from site

Quote:

We may temporarily access your MSN account to do a combination
of the following:
1. Send Instant Messages to your friends promoting this site.
2. Introduce new entertaining sites to your friends via Instant Messages.

Cheeky sods wouldnt get away with that with me.

lost411 · 01-28-09 at 05:13 AM

mmmhmmm seriously though who sign into a site like that, people who do deserve there accounts to be hijacked. i mean it looks so unlegit, dodge, plus the way that it gets spread around, and also the url... i mean seriously guys come one :P

**navarreli** · 01-28-09 at 05:59 AM

Quote: Originally Posted by lost411

mmmhmmm seriously though who sign into a site like that, people who do deserve there accounts to be hijacked. i mean it looks so unlegit, dodge, plus the way that it gets spread around, and also the url... i mean seriously guys come one :P

Agree, a few months ago a virus pretty much like this one , spread like an outbreak down here in Bolivia, personally i had like 30 contacts messaging me this is a pic of you at the party take a look and they didnt realize they were sending these messages, it was so annoying i had to block em all.

hsyeow · 01-29-09 at 01:10 AM

Do inform your friends about it. At least they know they're infected and will do the necessary cleaning. A friend of mine got the same thing, except the message is not sent using MSN. It sent out spams to everyone in his Hotmail address book. He only realized it when i informed him. Changing the Hotmail password stopped the spamming.