Hotmail IM warning

The technical section

Moderator: Global Moderators

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Hotmail IM warning

Post by Tracey » Sun Mar 22, 2009 11:56 am

This morning i had an "IM" seemingly from my 11 year old niece with a link which i clicked on. Shouldnt have done that as it was a link to a porn site. I sat here and thought something wasnt quite right. Half hour later i get another porn link again looking like its come from my niece.
So i called my sister in law and apparently my niece recieved a link in an IM which looked like it was from a friend of hers which contained the porn link . My niece didnt even look at what it was and did click on it - but the link didnt work - thankfully !.
It looks like who ever is doing this has raided and sent these links to her friends list of contacts then my nieces contacts and i hope not mine as well because the hotmail email address is a back up business email :shock: :oops:

Suppose it was only a matter of time before these "expletives" got to me !
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

marilyn morning
Global Moderator
Posts: 3098
Joined: Sun Dec 12, 2004 1:45 am
Location: Rhode Island, USA

Post by marilyn morning » Sun Mar 22, 2009 3:36 pm

Hi Tracey,

Someone with more technical experience should be along soon. But in the meantime something similar happened to me a few weeks ago.

My spyware doctor blocked a virus called "Backdoor Bandok" which attempted to attack my e-mail and AOL IM address book. When I clicked on the option to "fix" the problem, I got a message that a link ( to repair the problem) was missing and I needed to re-install my virus protection.

I ran a spyware scan and sure enough there was the virus waiting to attack my computer :evil: so naturally I removed it, but

I wasn't comfortable with that, so I ran a "full" scan which took over an hour and hidden deep inside my computer was another threat. After discussing this with my husband (who has more experience then I with computers) he determined that most people would be satisfied that the virus was removed with the short scan and wouldn't think a "full" scan was required to search for a deeper threat?

Sorry to say this but I would guess that your niece's computer has a virus, which has attacked her e-mail or AOL address book or both?

If I was you, I'd run a "full scan" and see what turns up and have your niece do the same. Once you know the name of the threat, then google it and there should be plenty of tech support out there on the web?

By the way, my problem all began one day when I was reading an article on a on-line newspaper. :shock: When I clicked on the article, a porn ad popped up. :shock: Long story short, four days later when I turned on my computer, I rec'd the warning that my e-mail and AOL IM wasn't protected and I needed to re-install my virus protection.

Hopefully, I haven't confused you with this explanation :D
Marilyn

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Post by Tracey » Sun Mar 22, 2009 3:51 pm

Hi Marilyn

They are not aol - cant remember who is the provider. This is happening through thier hotmail instant messaging which all the kids are addicted to here, not AIM and has affected her friends address book or contacts and then hers and possibly mine but ive not heard it has reached anyone of mine yet. I blocked her screen name as soon as i figured something wasnt right. Oddly at the time my pc was running a full scan as scheduled every sunday and takes about 5 hours :shock: and i am now as usual going to follow that up with spybot - all part of my usual sunday chores !
Ive also begun to warn all my contacts just incase they seemingy get an email from my hotmail account which ive said would be suspicious in itself as i hardly ever use it.

Fingers crossed all is well so far.............................
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

marilyn morning
Global Moderator
Posts: 3098
Joined: Sun Dec 12, 2004 1:45 am
Location: Rhode Island, USA

Post by marilyn morning » Sun Mar 22, 2009 4:21 pm

Hi Tracey,

I'm fairly sure (but not certain) that by clicking on the link your address book was infected? From what I've read, these viruses can sometimes be on a timer. It was 4 days after I clicked on the newspaper link, that I rec'd the message from my spyware program.

A virus is a virus and from what I understand they attach themselves to IM buddy lists and address books, then spread like wildfire.

Off to do my own Sunday chores now.....

Good Luck
Marilyn

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Post by Tracey » Sun Mar 22, 2009 4:29 pm

Oh well if theyre gonna getcha.................................. :roll:

Maybe a call to the man that does is in order.

This only seems to effect people who are on line and signed in to Hotmail so they can catch you with an IM. We'll see what happens as you say it may take a few days.
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

Currie
Posts: 3924
Joined: Fri Jun 22, 2007 3:20 am
Location: Australia

Post by Currie » Mon Mar 23, 2009 2:17 am

Hello Tracey,

I don’t use Instant Messaging, or Hotmail or anything like that, so I’ll just have a few general things to say and hope I’m not talking too much through my hat.

I don’t know whether you trust your niece but you obviously trust your niece’s computer or anything that claims to be from her computer. You appear to have received a message with absolutely no hint that it has come from her except for the fact that it says it is from her computer. Without question you’ve accepted it is from her and clicked on any available links or attachments and been dealt with accordingly. Don’t worry because you’re very far from being alone. Many people expect that their anti virus and other programs will protect them from this sort of thing, but it’s just like seat belts and air bags in cars, you still have to watch where you’re going.

The email or message may not have been from your niece’s computer and in fact it probably wasn’t if the virus was written by someone who was smart. In fact if both you and your niece are getting these messages perhaps they’re originating from the computer of a relative or common acquaintance. Her email address and yours were possibly collected from that computer by the virus and it’s sending out emails in the names of all those people to all the rest. Those people, because they get an email from a name they know, often blindly click on the provided links or attachments and so the virus spreads.

Viruses aren’t designed to be found, they’re designed to spread until they’re the latest and the greatest in the history of the World. If possible they don’t advertise the real source of an infected email as this would just make detection of the source, and eradication, much simpler.

The lesson there is that you shouldn’t open attachments or click on links in emails unless the sender has included a message that clearly identifies him or her as the sender or unless they have indicated separately before hand that there is something on the way. If you ignore that rule it’s just a matter of shutting your eyes and taking your chances. It may be inconvenient but it’s true nevertheless.

The same applies when sending emails with links or attachments to other people. I know it’s so easy to send links to other people by just making one or two clicks but I’ve always thought that it was worthwhile when sending something to some one to spend a few minutes extra compiling a short message so that they could be sure it really was from a real person.

If you do get one of those emails with nothing in the header or the message that satisfactorily identifies the sender and you’re not expecting same and there’s a link or attachment just delete the thing. The odds are its rubbish, no one in their right mind would send anything important in such a fashion.

After you’ve done a full virus scan, if you’re still worried, try an online scan such as this one http://www.kaspersky.com/virusscanner. Your anti virus program may have an inbuilt spyware scanner but you could do a scan with another spyware scanner as well. Get your niece to do this as well as children don’t tend to do this sort of thing and tend to click on anything at all simply because they are children. Kids shouldn’t be allowed to play on the superhighway unless they know what they’re doing or are being supervised by someone who knows what they’re doing otherwise they’ll get run over.

Make sure you have the very latest version of Internet Explorer, so that clicking on a malicious link can’t set off an ActiveX event that can change anything it likes on your computer. Better still get Firefox. Make sure you have all the latest updates from Windows Update. Make sure Windows Update is actually turned on. I’ve recently seen a relative’s computer, on which the operating system was installed by a professional, which had XP SP1 with automatic updates turned off and open to every form of attack that had been developed over the last five or so years. You can test your Windows Update status with Belarc Advisor http://www.snapfiles.com/reviews/Belarc ... elarc.html

Hope that’s useful,
Alan

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Post by Tracey » Mon Mar 23, 2009 9:56 am

Thank you Alan

You appear to have received a message with absolutely no hint that it has come from her except for the fact that it says it is from her computer.
Maybe but everything was her............her name and her little ditty she had beside her name, little flashing orange box saying she was IM ing me, signed in and online so i had no reason to believe it wasnt her except i should have read what the link said :oops: :shock: ! ................. I blocked her as soon as i received a second IM which i didnt click on. She has received one more from the friends computer that started this cycle off for us.

She is the only reason is use IM and only sign into hotmail when she is "on" although i do have a stand by hotmail account or two and i have warned most of my contacts. Any email i get on aol if i dont know the name i "spam" it but the IM caught me out.

Luckily everything is up to date on my pc and all seems ok so far.
I will check the virus scanner link and i may actually get round to installing Firefox, i dont know whats scaring me about doing that especially after a recent thread about it on here. Actually i will do it today, so watch out for the help post ! :roll:

Tracey
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

Currie
Posts: 3924
Joined: Fri Jun 22, 2007 3:20 am
Location: Australia

Post by Currie » Mon Mar 23, 2009 12:10 pm

That’s okay Tracey,

I thought I may have been flying a bit on the blind side. I haven’t experienced the flashing orange boxes and I’m not sure I want to. You can have both IE and Firefox on your computer at the same time and even run them both together. Firefox will import your favourites into its bookmarks and you can get the feel of it and decide if its best for you.

All the best,
Alan

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Post by Tracey » Mon Mar 23, 2009 1:38 pm

One thing i will say about the whole thing is that because hotmail uses IE. the web page from the dodgy link tried to open using IE but IE said in so many words that it had blocked this site. I am not used to using IE at all but i seem to remember Annette saying that it, Firefox worked fine with aol so..............
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

nelmit
Posts: 4002
Joined: Wed Dec 15, 2004 11:49 pm
Location: Scotland

Post by nelmit » Mon Mar 23, 2009 4:40 pm

Tracey wrote:One thing i will say about the whole thing is that because hotmail uses IE. the web page from the dodgy link tried to open using IE but IE said in so many words that it had blocked this site. I am not used to using IE at all but i seem to remember Annette saying that it, Firefox worked fine with aol so..............
I'm still using Firefox over aol and browsing is much, much faster. The only downside is you can't import your favourites (like you can with IE) but it didn't take me long to gather the addresses I use frequently.

Regards,
Annette