Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possible Messenger Virus


  • Please log in to reply
1 reply to this topic

#1 Linnie

Linnie

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Hamilton, ON, Canada
  • Local time:02:36 AM

Posted 14 October 2008 - 03:52 AM

I have recently recieved some random messages on Windows Live Messenger from a couple of contacts and now I have been told I am sending some out too while I'm offline. Here is what's happening.

While a contact of mine, we'll call then X, is offline messages will come in from him. All it is is a URL for a site that dosn't exist (ya I was stupid and clicked some of them). The messages always are followed by a smiley face that is winking. I've noticed my pc is a little slow but that might not be related. I have scanned with the online "Trend Micro Houscall", I have "Windows OneCare" and have scanned with that, and have scanned with my "Spybot search and destroy" and all say that my pc is clean. I have done some research and find that these messages might be linked to something called 91.191.171.22 or 91-191-171-22.tbt.com.tr but have never actually seen them on my computer. The messages come from X once or twice a day. I have blocked X and still I get the messages. My sister says that my messanger is sending them to her now. I have gone into my msn account and changed my password and my security question already and it has made no difference. The messages and URLs read as follows (they were all sent one at atime) [please don't click any incase it is mallicious]:

<http://www.faocazae.mobi>
<http://www.eoroal.net/>
<http://www.araoaa.net/>
<http://www.elctmt.net/>
<http://www.ccikan.net/>
<http://www.omoiii.net/>
<http://www.lrkcaa.net/>
<http://www.atckti.net/>
<http://www.kieice.net/>
<http://www.nmrtrl.net/>
<http://www.cttlca.net/>
<http://www.rlilee.net/>
<http://www.mlctoi.net/>
<http://www.atcmin.net/>
<http://www.cmcrtr.net/>
<http://www.aaacnt.net/>
<http://www.nmnaro.net/>
<http://www.omoiii.net/>
<http://www.keteel.net/>
<http://www.lckemt.net/>
<http://www.nrrrka.net/>
<http://www.cltrnl.net/>
<http://www.olklmr.net/>

Are these signs of malicious software or a trojan or a virus and how do I remove it?
I am still able to chat with X when he is online and these messages only come when the contact is offline.
I have had Windows Live OnCare and Spybot Search and Destroy running constantly on my PC and they never have indicated a problem so I'm not even sure if this really is a threat but I'd like to know the cause.
Please help me I can't figure this out!!! Does anyone else have this problem what's the best fix?

Edited by Orange Blossom, 14 October 2008 - 03:16 PM.
Deactivate links. ~ OB


BC AdBot (Login to Remove)

 


m

#2 Linnie

Linnie
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Hamilton, ON, Canada
  • Local time:02:36 AM

Posted 14 October 2008 - 04:36 AM

By the way I am running a laptop (Acer Aspire 5000) with Windows XP with all the updates and service packs. All antivirus and suck is up to date and I have the newest version of Windows Live Messenger. I tried scanning with the online free A-squared and all it found were some cookies that I removed. I hope this helps, I really would like to know what's going on.

Thanks so much!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users