You are either not logged in or not registered with our community. Click here to register.
 
December 08, 2016, 12:30:25 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length

Click here if you are having problems.
Default Wide Screen Beige Lilac Rainbow Black & Blue October Send us your theme!

Hark!  The Herald!
Holiday Issue 2016

Wiki Blogs Dicebot

Author Topic: Weird YIM link threat  (Read 3032 times)

0 Members and 1 Guest are viewing this topic.

Offline KurzykTopic starter

Weird YIM link threat
« on: July 19, 2010, 09:20:46 PM »
Hey everyone wasn't sure if this was the right place to post this but had a weird experience with YIM that I wanted to share. I got a message from a friend on YIM asking if a pic they had found was of me. It followed with a link.

Don't click on it! It's not from the friend in the contact list. I don't know where it's from, but it seems to use the contact name, asks the question of whether the following link is a pic of you, peaking curiosity. The link has something in it that Norton picked up as a threat but fixed.

I know that a few others have had this happen to them as well so even if you get a message from a friend with a link, make sure it's really them before clicking.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #1 on: July 19, 2010, 09:26:59 PM »
Yea its happened to Lynnie, and it happened to me. Thankfully Norton killed the virus that was in it.

Offline Absinthe Tori

Re: Weird YIM link threat
« Reply #2 on: July 19, 2010, 09:29:44 PM »
It happened on MSN as well the person who's account I was getting the message off was someone on E, since I kept getting the message I had to block the accout...I hate it when theses things come round.

Once your friend has control of their messenger again, tell them what happened and a quick change of password should stop it from happening again.

Offline KurzykTopic starter

Re: Weird YIM link threat
« Reply #3 on: July 19, 2010, 09:32:50 PM »
*nods* Yea I think the YIM account was compromised. She's changing her password so hopefully that will fix it.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #4 on: July 19, 2010, 09:36:14 PM »
Acvtually the LInk leads to facebook at some point so its gotta be orioginating from there or someone on there.

Offline OldSchoolGamer

Re: Weird YIM link threat
« Reply #5 on: July 19, 2010, 09:41:42 PM »
The problem with Facebook is all the apps.  You have to be VERY careful which apps you authorize, and many users are not.  A rule of thumb I use is if the app doesn't have at least three out of five stars, it ain't getting in the door.  If there are mis-spellings in the app description, no-can-do.  If I have any reason to doubt it's legit, it goes on the Block list.

Unfortunately, many users just authorize stuff left and right because it promises boobies, a "shocking video," free points for Mafia Wars, a Dislike button, or what-have-you.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #6 on: July 20, 2010, 07:28:40 PM »
Ok I was hacked. Norton's runing now but my YIM has sent that link out to all my friends and changing my password didn't work. I'm usually very good about this to the point of Paranoia but something got through.

Also Now when I try to sign on to E using IE it gives me popup message saying that unless I confirm I'm not a robot buy choosing  one o0f 5 things to do, I can't log in. Luckily I have firefox and others.

Offline Haibane

Re: Weird YIM link threat
« Reply #7 on: July 20, 2010, 07:31:12 PM »
Norton's running now.
That might be your problem right there.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #8 on: July 20, 2010, 07:33:19 PM »
That might be your problem right there.

Ummm no, Norton is worth its price and its not faulty.

Offline Beguile's Mistress

  • Time flies like an arrow ~ Fruit flies like a banana ~ Elliquiy's Fair-E Godmother
  • Dame
  • Carnite
  • *
  • Join Date: Jul 2009
  • Location: Faeleacanvald ~ The Steeler Nation ~ Home of Lord Stanley's Cup 2016 ~ She won't stay throwed! ~ 48\22-5\1\11-5\7
  • Gender: Female
  • Perpetual Notion Machine ~ 'What if...?'
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 3
Re: Weird YIM link threat
« Reply #9 on: July 20, 2010, 08:10:07 PM »
I'm having the same problem.  It's running through YIM and MSN. 

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #10 on: July 20, 2010, 08:11:25 PM »
I'm having the same problem.  It's running through YIM and MSN.

Virus san should catch it but I want to catch the shit that did it. I'd make him hate the day he met me.

Offline Vekseid

Re: Weird YIM link threat
« Reply #11 on: July 20, 2010, 08:19:20 PM »
I'm having the same problem.  It's running through YIM and MSN. 

Did you try Microsoft Security Essentials or Avira from the computer help thread I linked you?

This stuff is only going to get more serious.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #12 on: July 20, 2010, 08:32:34 PM »
Did you try Microsoft Security Essentials or Avira from the computer help thread I linked you?

This stuff is only going to get more serious.

what link man cause Norton aint finding this thing.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #13 on: July 20, 2010, 08:50:52 PM »
OK folks this is worse than I thought. It signed me back into YIM while I was across the room on my bed.

Offline Haibane

Re: Weird YIM link threat
« Reply #14 on: July 20, 2010, 08:57:28 PM »
Ummm no, Norton is worth its price and its not faulty.
I didn't say it was faulty. And clearly because of the issues you are having it is NOT working in this instance.

Have you tried downloading and running Mbam from Malwarebytes? Free and it has found and cleaned several nasties for me in the past. I'm not going for oneupmanship here or being funny, or trying to trash Norton, this is not the time and place for that. I'm just recommending an app that has worked for me in the past.

http://www.malwarebytes.org/

And here's Vekseid's link

http://elliquiy.com/forums/index.php?topic=25435.0
« Last Edit: July 20, 2010, 08:59:42 PM by Haibane »

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #15 on: July 20, 2010, 09:01:16 PM »
Thank you for Vek'
s link. I am also trying a delete and reinstall of YIM.

Offline Beguile's Mistress

  • Time flies like an arrow ~ Fruit flies like a banana ~ Elliquiy's Fair-E Godmother
  • Dame
  • Carnite
  • *
  • Join Date: Jul 2009
  • Location: Faeleacanvald ~ The Steeler Nation ~ Home of Lord Stanley's Cup 2016 ~ She won't stay throwed! ~ 48\22-5\1\11-5\7
  • Gender: Female
  • Perpetual Notion Machine ~ 'What if...?'
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 3
Re: Weird YIM link threat
« Reply #16 on: July 20, 2010, 09:12:32 PM »
Thank you for Vek'
s link. I am also trying a delete and reinstall of YIM.

Let us know if that works.

Offline Vekseid

Re: Weird YIM link threat
« Reply #17 on: July 20, 2010, 09:24:34 PM »
If you have access to a clean computer, the best thing to do is change your Yahoo, MSN, AIM, etc. passwords (and any password reset details like secret questions and so on) on another machine, then work on clearing it out.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #18 on: July 20, 2010, 09:26:37 PM »
Ok deletion and reinstall don't work.

Offline Haibane

Re: Weird YIM link threat
« Reply #19 on: July 20, 2010, 09:54:56 PM »
I've done some digging and this seems to be the same virus you have had:

http://gulaley.blogspot.com/2010/03/yahoo-messenger-ym-virus.html

The page that links to the removal instructions is here:

http://xibex.blogspot.com/2010/05/virus-strike-yahoo-messenger-again.html

The instructions recommend downloading and installing Malwarebytes and running that, as I linked to a while back up the page.

Veks, if you can verify if this is useful, please do. If this is NOT useful advice it is best removed as it may just confuse people.

And please have a think, Paladin, about removing Norton and replacing it with something else. Kaspersky is excellent, I've used it for some years but it hardly gets mentioned here because its a British product. I'd say it's one of the best AV suites on the market.

http://www.kaspersky.co.uk/
« Last Edit: July 20, 2010, 09:59:11 PM by Haibane »

Offline Vekseid

Re: Weird YIM link threat
« Reply #20 on: July 20, 2010, 10:29:36 PM »
Kapersky has some moral issues. It still doesn't have the reputation that MSE and Avira have built.

Unfortunately without having an infected machine at hand it's hard to say, your link might work. These things are getting a lot scarier, and I've been meaning to do a more comprehensive essay about being security conscious, because some of these programs open up backdoors and install keyloggers.

Offline Wahots

  • F seeking M - extremes
  • Lady
  • Seduced
  • *
  • Join Date: Dec 2009
  • Location: the Edge of Insanity
  • Gender: Female
  • This is some personal text. There are many like it, but this one is mine!
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #21 on: July 20, 2010, 10:54:30 PM »
Seriously - download http://www.malwarebytes.org/ then restart your computer in safemode. Run a scan. Restart computer normaly.

I had to do that 3 times but it finally worked.

I was blocked from almost any site I had to sign onto.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #22 on: July 20, 2010, 10:58:47 PM »


And please have a think, Paladin, about removing Norton and replacing it with something else. Kaspersky is excellent, I've used it for some years but it hardly gets mentioned here because its a British product. I'd say it's one of the best AV suites on the market.

http://www.kaspersky.co.uk/

I paid for a 2 year contract with Norton. Once that is done I will probably switch. Until then though its working fine. This is the first time it hasn't caught something.

Offline Blitzy

  • In a world full of color, I'll always be black and white.
  • Dame
  • Enchanter
  • *
  • Join Date: Jan 2010
  • Location: In the deep dark forest...
  • Gender: Female
  • Howling's Baby
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 13
Re: Weird YIM link threat
« Reply #23 on: July 20, 2010, 11:16:56 PM »
Had a virus sweep through my computer though I don't think it was the same thing. It was a Trojan set that automatically tried' scanning' my computer as an antivirus. I caught it but it had flipped the proxy settings on my internet so I couldn't connect. I had to do exactly what was stated earlier: Log in on Safe-mode, run Malewarebytes, and it cleaned it off easy peasy.

Offline Paladin

  • Angel/Demon Hybrid
  • Restricted
  • Enchanter
  • *
  • Join Date: Jan 2009
  • Location: Southern Indiana
  • Gender: Male
  • Without my Honor I am Nothing. Try to understand
  • My Role Play Preferences
  • View My Rolls
  • Referrals: 0
Re: Weird YIM link threat
« Reply #24 on: July 21, 2010, 01:33:23 AM »
Ok the Microsoft security thing is what has worked.