I am already being branded as a virus carrier by one of my yahoo messenger buddies because of the viruses in my yahoo messenger account.The worst virus that I had was the funny ust scandal virus which seemed to have been “downloaded” by people who used our PC the night before I found my yahoo messenger infected with the virus.
When I was in Zamboanga and was using a public computer to chat with my hubby, my YM buddies sent me messages that my yahoo messenger account was again carrying a virus. Without me knowing it, I was sending the following messages to my IM buddies. (I found them when I opened my other YM account):
Tra lai em niem vui khi duoc gan ben em, tra lai em loi yeu thuong em dem, tra lai em niem tin thang nam qua ta dap xay. Gio day chi la nhung ky niem buon… http://nhattruongquang.0catch.com
E may, vao day coi co con nho nay ngon lam http://nhattruongquang.0catch.com
Vao day nghe bai nay di ban http://nhattruongquang.0catch.com
My messenger status is also automatically changed into this: “Trang Web nay coi cung hay, vao coi thu di http://nhattruongquang.0catch.com ”
What is this?
I googled for information about this and realized that the http://nhattruongquang.0catch.com messages are actually what you call a spim (will make a separate post about this later). A spim is a spam that penetrates IM accounts instead of email accounts and generally contains some links. http://nhattruongquang.0catch.com, I have learned, is actually a web hosting site that is being marketed through spimming.
How to Avoid receiving the http://nhattruongquang.0catch.com messages
I was looking for information on how to remove http://nhattruongquang.0catch.com text and links but the best advice I got so far is on how to avoid receiving this http://nhattruongquang.0catch.com spim. The trick is to edit the messenger preferences and set your settings to ‘Ignore anyone who is not on your Messenger list’. This way, people, including spimmers will not be able to send you messages if they are not included in your buddy list.
I also suggest to people not to purchase their web hosting from http://nhattruongquang.0catch.com. The site deserves a boycott after messing with our instant messaging accounts.
July 21st, 2008 at 11:53 pm
plz remove your thing on my messenger which is yahoo i dont like it plz thanks God bless you on your way thanks God bless you again tax
ttpnhattruongquang0catch
July 22nd, 2008 at 8:14 am
Mendoza4live,
I was not the one who sent you that ttpnhattruongquang0catch thing. Just disregard it and read the post above.
July 23rd, 2008 at 3:13 am
but how o delete it,coz evn my pc is affectd
July 26th, 2008 at 8:54 am
Biet tin gi chua, vao day coi di http://nhattruongquang.0catch.com
bh Voila Siro Thawaw
August 9th, 2008 at 11:30 am
how to delete this damn thing
November 13th, 2008 at 10:58 am
try opening task manager, processes and look for rvhost.exe remove it and search for the folders and just delete it. better if you have task killer.
December 8th, 2008 at 5:03 pm
pls help. what if i pressed ctrl+alt+del then task manager wont work?! is it because of the spim?! pls reply. tn.
February 19th, 2009 at 12:40 pm
damn..i cant open task manager
February 22nd, 2009 at 9:39 am
I wonder why some people still receive this spim in their YM. I checked the website today and this is what I saw:
SPAM Violation!
This site has been banned for SPAM violations. If you have any questions please contact technical support.
April 7th, 2009 at 9:28 am
my pc already infect by this virus, just format the hardisk to remove the virus
June 17th, 2009 at 7:02 pm
thanks for the trick
August 21st, 2009 at 7:15 am
http://www.ehow.com/how_5142889_remove-wyautoit.html
The W32.Yautoit worm, which is also known as the W32.Imaut.N worm, propagates itself through instant messages from the Yahoo Instant Messenger service. If you click on the link provided in the instant message your computer will become infected with the worm and it will send out the same message to all of your Messenger contacts. You will need to both run an anti-virus program and manually delete a few registry entries to remove the W32.Yautoit worm.
August 29th, 2009 at 10:14 am
Okay, I keep looking for information on this worm, but haven’t been able to find much. I was chatting with a friend tonight and their YIM name sent me that same message and link. Because it looked fishy to me, I didn’t click on the link, instead I copied the link and ran it through google and found out it was a worm. Now my question is, am I infected even though I haven’t clicked on the link?
And yes, that company should be boycotted for setting this up. This is nuts!
September 12th, 2009 at 3:32 pm
please remove this virusW32 from my YM.. thanks God bless
September 19th, 2009 at 3:57 pm
Hey, pare, How do you get rid of this worm? Istorbo kasi eh. Mga Viatnamese yata gumawa nito eh. Kupal sila a! (They are annoying. It must be the vietnamese who did it. They are jerks!