Yet another site on computer viruses and spam

I am already being branded as a virus carrier by one of my yahoo messenger buddies because of the viruses in my yahoo messenger account.The worst virus that I had was the funny ust scandal virus which seemed to have been “downloaded” by people who used our PC the night before I found my yahoo messenger infected with the virus.

When I was in Zamboanga and was using a public computer to chat with my hubby, my YM buddies sent me messages that my yahoo messenger account was again carrying a virus. Without me knowing it, I was sending the following messages to my IM buddies. (I found them when I opened my other YM account):

Tra lai em niem vui khi duoc gan ben em, tra lai em loi yeu thuong em dem, tra lai em niem tin thang nam qua ta dap xay. Gio day chi la nhung ky niem buon… http://nhattruongquang.0catch.com

E may, vao day coi co con nho nay ngon lam http://nhattruongquang.0catch.com

Vao day nghe bai nay di ban http://nhattruongquang.0catch.com

My messenger status is also automatically changed into this: “Trang Web nay coi cung hay, vao coi thu di http://nhattruongquang.0catch.com ”

What is this?
I googled for information about this and realized that the http://nhattruongquang.0catch.com messages are actually what you call a spim (will make a separate post about this later). A spim is a spam that penetrates IM accounts instead of email accounts and generally contains some links. http://nhattruongquang.0catch.com, I have learned, is actually a web hosting site that is being marketed through spimming.

How to Avoid receiving the http://nhattruongquang.0catch.com messages
I was looking for information on how to remove http://nhattruongquang.0catch.com text and links but the best advice I got so far is on how to avoid receiving this http://nhattruongquang.0catch.com spim. The trick is to edit the messenger preferences and set your settings to ‘Ignore anyone who is not on your Messenger list’. This way, people, including spimmers will not be able to send you messages if they are not included in your buddy list.

I also suggest to people not to purchase their web hosting from http://nhattruongquang.0catch.com. The site deserves a boycott after messing with our instant messaging accounts.

§48 · February 21, 2008 · Uncategorized · · [Print]

15 Responses to “What to do when your IM shows and sends http://nhattruongquang.0catch.com link”

  1. 1
    Mendoza4live Says:

    plz remove your thing on my messenger which is yahoo i dont like it plz thanks God bless you on your way thanks God bless you again tax

    ttpnhattruongquang0catch

  2. 2
    Rhodilee Says:

    Mendoza4live,

    I was not the one who sent you that ttpnhattruongquang0catch thing. Just disregard it and read the post above.

  3. 3
    amrin Says:

    but how o delete it,coz evn my pc is affectd

  4. 4
    Yesnis Says:

    Biet tin gi chua, vao day coi di http://nhattruongquang.0catch.com
    bh Voila Siro Thawaw

  5. 5
    amy Says:

    how to delete this damn thing

  6. 6
    ngarngar Says:

    try opening task manager, processes and look for rvhost.exe remove it and search for the folders and just delete it. better if you have task killer.

  7. 7
    Ziah Says:

    pls help. what if i pressed ctrl+alt+del then task manager wont work?! is it because of the spim?! pls reply. tn.

  8. 8
    amy Says:

    damn..i cant open task manager

  9. 9
    Rhodilee Says:

    I wonder why some people still receive this spim in their YM. I checked the website today and this is what I saw:

    SPAM Violation!

    This site has been banned for SPAM violations. If you have any questions please contact technical support.

  10. 10
    Made Candra Says:

    my pc already infect by this virus, just format the hardisk to remove the virus

  11. 11
    Saahir Says:

    thanks for the trick

  12. 12
    ComputerTech Says:

    http://www.ehow.com/how_5142889_remove-wyautoit.html

    The W32.Yautoit worm, which is also known as the W32.Imaut.N worm, propagates itself through instant messages from the Yahoo Instant Messenger service. If you click on the link provided in the instant message your computer will become infected with the worm and it will send out the same message to all of your Messenger contacts. You will need to both run an anti-virus program and manually delete a few registry entries to remove the W32.Yautoit worm.

  13. 13
    Jade Says:

    Okay, I keep looking for information on this worm, but haven’t been able to find much. I was chatting with a friend tonight and their YIM name sent me that same message and link. Because it looked fishy to me, I didn’t click on the link, instead I copied the link and ran it through google and found out it was a worm. Now my question is, am I infected even though I haven’t clicked on the link?

    And yes, that company should be boycotted for setting this up. This is nuts!

  14. 14
    edith trias Says:

    please remove this virusW32 from my YM.. thanks God bless

  15. 15
    Junior Says:

    Hey, pare, How do you get rid of this worm? Istorbo kasi eh. Mga Viatnamese yata gumawa nito eh. Kupal sila a! (They are annoying. It must be the vietnamese who did it. They are jerks!

Leave a Reply