I am already being branded as a virus carrier by one of my yahoo messenger buddies because of the viruses in my yahoo messenger account.The worst virus that I had was the funny ust scandal virus which seemed to have been “downloaded” by people who used our PC the night before I found my yahoo messenger infected with the virus.
When I was in Zamboanga and was using a public computer to chat with my hubby, my YM buddies sent me messages that my yahoo messenger account was again carrying a virus. Without me knowing it, I was sending the following messages to my IM buddies. (I found them when I opened my other YM account):
Tra lai em niem vui khi duoc gan ben em, tra lai em loi yeu thuong em dem, tra lai em niem tin thang nam qua ta dap xay. Gio day chi la nhung ky niem buon… http://nhattruongquang.0catch.com
E may, vao day coi co con nho nay ngon lam http://nhattruongquang.0catch.com
Vao day nghe bai nay di ban http://nhattruongquang.0catch.com
My messenger status is also automatically changed into this: “Trang Web nay coi cung hay, vao coi thu di http://nhattruongquang.0catch.com ”
What is this?
I googled for information about this and realized that the http://nhattruongquang.0catch.com messages are actually what you call a spim (will make a separate post about this later). A spim is a spam that penetrates IM accounts instead of email accounts and generally contains some links. http://nhattruongquang.0catch.com, I have learned, is actually a web hosting site that is being marketed through spimming.
How to Avoid receiving the http://nhattruongquang.0catch.com messages
I was looking for information on how to remove http://nhattruongquang.0catch.com text and links but the best advice I got so far is on how to avoid receiving this http://nhattruongquang.0catch.com spim. The trick is to edit the messenger preferences and set your settings to ‘Ignore anyone who is not on your Messenger list’. This way, people, including spimmers will not be able to send you messages if they are not included in your buddy list.
I also suggest to people not to purchase their web hosting from http://nhattruongquang.0catch.com. The site deserves a boycott after messing with our instant messaging accounts.
September 19th, 2009 at 3:57 pm
Hey, pare, How do you get rid of this worm? Istorbo kasi eh. Mga Viatnamese yata gumawa nito eh. Kupal sila a! (They are annoying. It must be the vietnamese who did it. They are jerks!
September 12th, 2009 at 3:32 pm
please remove this virusW32 from my YM.. thanks God bless
August 29th, 2009 at 10:14 am
Okay, I keep looking for information on this worm, but haven’t been able to find much. I was chatting with a friend tonight and their YIM name sent me that same message and link. Because it looked fishy to me, I didn’t click on the link, instead I copied the link and ran it through google and found out it was a worm. Now my question is, am I infected even though I haven’t clicked on the link?
And yes, that company should be boycotted for setting this up. This is nuts!
August 21st, 2009 at 7:15 am
http://www.ehow.com/how_5142889_remove-wyautoit.html
The W32.Yautoit worm, which is also known as the W32.Imaut.N worm, propagates itself through instant messages from the Yahoo Instant Messenger service. If you click on the link provided in the instant message your computer will become infected with the worm and it will send out the same message to all of your Messenger contacts. You will need to both run an anti-virus program and manually delete a few registry entries to remove the W32.Yautoit worm.
June 17th, 2009 at 7:02 pm
thanks for the trick