Author Topic: Messenger sending links  (Read 6011 times)

0 Members and 4 Guests are viewing this topic.

deepnx

  • Guest
Messenger sending links
« on: August 06, 2009, 01:16:30 PM »
Hi

i have AVAST HOME free edition altest with all the updates

recently i have got complaints from my friends that i was sending them links while chatting with them

links were to some site that replaced the text that i used to chat with

some site called "pixme.webs.com"  i am really frustrated with this

please advice me something

i did a scan but nothing was found and all my avast services are on everytime i start the PC

i also scanned using SPYBOT SEARCH & DESTROY which is fully updated too

i have attached an HIGHJACK THIS log

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Messenger sending links
« Reply #1 on: August 06, 2009, 02:01:33 PM »
Isn't the problem in your friends' computers?

I suggest use MBAM to scan your computer too.
The best things in life are free.

YoKenny

  • Guest
Re: Messenger sending links
« Reply #2 on: August 06, 2009, 03:28:31 PM »
I see that the Sun Java is down level C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll and has security exposures.

Go to Add/Remove Programs and uninstall all Java installs.

Java Downloads for All Operating Systems:
http://www.java.com/en/download/manual.jsp <== current is Version 6 Update 15

Install User Profile Hive Cleanup Service
Brief Description
A service to help with slow log off and unreconciled profile problems.
http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en


Run Secunia Online Software Inspector to see what other applications have vulnerabilities:
http://secunia.com/vulnerability_scanning/online

deepnx

  • Guest
Re: Messenger sending links
« Reply #3 on: August 07, 2009, 08:35:21 PM »
Tried BOTH the things none worked !!

still my frnz are getting those links :(

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Messenger sending links
« Reply #4 on: August 07, 2009, 08:36:17 PM »
Which instant messenger(im) do you use?.

deepnx

  • Guest
Re: Messenger sending links
« Reply #5 on: August 07, 2009, 08:49:23 PM »
Which instant messenger(im) do you use?.

Windows Live Messenger

it sends link to some site called

pixme.webs.com to my frnz

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Messenger sending links
« Reply #6 on: August 07, 2009, 09:04:59 PM »
its called spimming.

pixme.webs.com is suspicious according to unmask parasites. try cleaning your temporary files once. you can use ccleaner for that purpose. switch to a stronger password in your windows live account which you use to im.

edit : take a look at this : http://microsoftontheissues.com/cs/blogs/mscorp/archive/2009/07/16/saying-no-to-spim.aspx
« Last Edit: August 07, 2009, 09:11:11 PM by nmb »

deepnx

  • Guest
Re: Messenger sending links
« Reply #7 on: August 08, 2009, 09:42:28 AM »
That didnt work either :(

plz help :(

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Messenger sending links
« Reply #8 on: August 08, 2009, 10:09:00 AM »
Oki try this :

get malwarebytes antimalware (mbam), instead of spybot search and destroy(you may also remove ss&d), from here : malwarebytes.org(free version - on demand scan olny), install, update and perform full scan. post log here.

get superantispyware(sas) and perform full scan. dont worry about the tracking cookies it reports. let sas deal with it.

fcodrv

  • Guest
Re: Messenger sending links
« Reply #9 on: August 12, 2009, 11:18:54 PM »
Hi, I`m afect too by this link.. sorry for my english.. I try whit msncleaner and malaware bytes and nothing.. it´s a new virus..  ??? ???  >:(

yawetage

  • Guest
Re: Messenger sending links
« Reply #10 on: August 12, 2009, 11:58:43 PM »
Es posible que tengas un rootkit. Necesitas Sophos Anti-rootkit. (Sophos en Español) También, puedes usar Dr. Web CureIt.
Maybe you have a rootkit. Try downloading and running Sophos anti-rootkit. Also use Dr. Web.