Possible YIM Phishing / Viruses

[Aurora Black]

I've noticed a scary assed trend on YIM. Last night I was working when someone on my contact list (I won't say who) popped online and sent a message before leaving right afterward: "Hope you like this. Funny."

I clicked on the link and it was one of those scary surprise images that made me jump and laugh, and I liked it. So I sent a message back to my friend. Flash forward a couple of hours, and she comes online. We talk, and it turns out that she wasn't on YIM at all when the link was sent, AND she had a virus on her PC!

I hurried to install a new anti-virus program and use it (the old one had just expired), and I found a shitload of spyware and a goddamn Trojan. I'm free and clear now, but that's just nasty.

Today another impostor sent me the same link, so I thought it would be best to start a warning thread.

If you get a cryptic message from your YIM friends (that doesn't sound like something they would say) with a link, don't click it. It may be a virus.

 

[Trinique_Fire]

I've noticed a scary assed trend on YIM. Last night I was working when someone on my contact list (I won't say who) popped online and sent a message before leaving right afterward: "Hope you like this. Funny."

I clicked on the link and it was one of those scary surprise images that made me jump and laugh, and I liked it. So I sent a message back to my friend. Flash forward a couple of hours, and she comes online. We talk, and it turns out that she wasn't on YIM at all when the link was sent, AND she had a virus on her PC!

I hurried to install a new anti-virus program and use it (the old one had just expired), and I found a shitload of spyware and a goddamn Trojan. I'm free and clear now, but that's just nasty.

Today another impostor sent me the same link, so I thought it would be best to start a warning thread.

If you get a cryptic message from your YIM friends (that doesn't sound like something they would say) with a link, don't click it. It may be a virus.

Ditto, 'Rora.

I changed all my passwords and shit. I'm doing all the virus cleanup shit tonight.

 

[cloudy]

I just got two of those (one was supposedly from you, Rora, so you might wanna scan again).

 

[CrimsonMaiden]

Happening here too.

 

[Guest]

Thanks, 'Rora for letting us know about Yahoo.

I was getting a lot of Spam on YIM, too, so I dumped it completely a couple of days ago.

Now I use the chat feature on gmail - it has voice chat too - and it is much more convenient. Seems safe. So far, anyway.

 

[Nirvanadragones]

The first time around, I received it from every single Yahoo contact I have

 

[matriarch]

Looks like I'm part of the gang, just got the same messages on IM from Vana and Rora.

And I've noticeed that my Microsoft Explorer e-mail has suddenly started getting reams, and reams of SPAM. I've never had this before on that system, but I'm getting something like 40-50 every couple of days.

 

[Trinique_Fire]

Everybody: CHANGE YOUR PASSWORDS.

Seriously. I received the same message that Aurora got from a mutual friend. I didn't stop at just changing my Yahoo passwords either. I changed EVERYTHING.

 

[Aurora Black]

Shit. I cleaned up my PC last night, but I'll do it again for my peace of mind.

 

[matriarch]

Does this mean I have to change my ID and password on everything??

Seriously??

 

[Trinique_Fire]

Does this mean I have to change my ID and password on everything??

Seriously??

Yes. Believe me, it's better to be safe than sorry. Use at least one number in your password too. I keep all that info written down in a notebook though so I don't forget my passwords.

 

[ImpureThoughts]

I've been getting these messages, too, but I haven't clicked the link. Whew. Anyway, I found this information on another forum:

If you get a link from someone asking you to click on a link to geocities.com, don't click it. That person is infected and the link will ask you to login to view some adult pictures. By logging in with your Yahoo ID, they've recorded your username and password and will lock you out of your account.

I'm not sure if that helps, but it looks like if you're getting the messages, but not clicking, you're okay -- it's the sender who has the virus. But, if your ID is sending them out, you should change your password ASAP.

 

[Trinique_Fire]

Just in case....another link that's sent (the one I got) is a picture of Jessica Alba that looks like it's taking forever to load. Then instead of the picture loading a gruesome screaming face pops up. Like one of those prank e-mails you can get off ebaumsworld.

Yeesh.

 

[Alessia Brio]

Just in case....another link that's sent (the one I got) is a picture of Jessica Alba that looks like it's taking forever to load. Then instead of the picture loading a gruesome screaming face pops up. Like one of those prank e-mails you can get off ebaumsworld.

Yeesh.

I got this last night -- but I closed it before the screaming face popped up.

Today, it's been mainly 'Vana & 'Rora spamming my YIM

 

[The_Fool]

I got this last night -- but I closed it before the screaming face popped up.

Today, it's been mainly 'Vana & 'Rora spamming my YIM

Spamming my YIM.....my imagination makes that sound so decadent...

 

[Alessia Brio]

Spamming my YIM.....my imagination makes that sound so decadent...

I'd be disappointed if it didn't!

 

[Skip1934a]

Maybe one or more of you using yahoo IM shoud advise yahoo of what's going on. They may be able to trace the original source and shut it down. But if the virus is already circulating a good anti-virus program should be usd to clean your own IM up.

 

[Aurora Black]

Just in case....another link that's sent (the one I got) is a picture of Jessica Alba that looks like it's taking forever to load. Then instead of the picture loading a gruesome screaming face pops up. Like one of those prank e-mails you can get off ebaumsworld.

Yeesh.

That's the shit I got!

Passwords changed, and I'm doing a DEEP virus scan right now. Fuckers.

 

[Trinique_Fire]

That's the shit I got!

Passwords changed, and I'm doing a DEEP virus scan right now. Fuckers.

Also another trick is sitting in my lap. That clears it up too.

*cough*

 

[Aurora Black]

Also another trick is sitting in my lap. That clears it up too.

*cough*

 

[arienette]

I've been getting these messages, too, but I haven't clicked the link. Whew. Anyway, I found this information on another forum:



I'm not sure if that helps, but it looks like if you're getting the messages, but not clicking, you're okay -- it's the sender who has the virus. But, if your ID is sending them out, you should change your password ASAP.

I had the virus, I admit it and I'm sorry. However, I got it from another Lit person so everyone here watch out. A warning, Geocities never asks for a login when you view a site of theirs, I obviously found that out the hard way. I had it for 2 days, I'm assuming when I first found out about it and changed my passwords then - it isn't locking people out of their accounts, but I'd change your password on there especially anyway, just to be safe; and if you use the same password for several things, change them all -- That's what I did. I think I'm clean now, however if anyone gets that message from me again, please let me know by IMing me or PMing me here so I can run another scan.

Also, I let Yahoo run all night and checked it when I woke up and got a message from Vana and Rora, so you both may want to run a virus scan. Again, sorry to anyone who contracted this from me, I really had no idea and wish the best for you all.

 

[Trinique_Fire]

*sigh* An impossible dream.

 

[rgraham666]

I got a couple of these. Not many though.

I did click on the links, but it appears Yahoo has been alerted. In each case I got a Yahoo page saying "This page not available" or some such.

 

[AchtungNight]

I got a couple of these. Not many though.

I did click on the links, but it appears Yahoo has been alerted. In each case I got a Yahoo page saying "This page not available" or some such.

Same thing happened with me. Two messages from 'Rora that seemed unusual and led to dead links. I was confused about them, but glad I was able to come here and find the answers. Thank y'all.

 

[Aurora Black]

Well, it turned out that it wasn't just one Trojan, but SIX. They're gone now.