Windows Live (MSN) Messenger Friends’ Messege Spam Phishing URL (Clean ‘Virus’)

Windows Live Messenger (previously and still famously known as MSN Messenger) users have increasingly received annoying spam instant messaging from friends and buddies. When sending these spam IM, the contacts will sign in online and log out almost immediately, making those who want to chat with the pal disappointed. One characteristic of the spam IM sent in WLM is that they are almost arrived together at the same time, some received as offline message, and there is always a URL (link location) for you to click, with or without additional messages.

If you click on the URL (it’s hard not to click though especially with all the provocative text description) and go to the website, chance is that the website is highly malicious or may contain exploit, and may infect your computer with virus, Trojan, worm, keylogger, spyware, bot and etc. However, most is phishing site that attempt to steal your user name (email address) and password. And now it may be your turn to send these URLs to your contacts instead. When receiving these suspicious instant message, rule of thumb is DO NOT click on the link.

The link normally opens web pages with title such as “PICS FOR MSN FRIENDS v1.1c” and “FREE RINGTONES, WALLPAPERS, JAVA-GAMES” page (linked by infamous g00d-stuff fake IM message). These pages are phishing webpages that attempt to steal your password, and may also contain exploit to plant virus on your PC. “PIC FOR MSN FRIENDS v1.1c” page even looks starkly similar to MSN Messenger login user interface and asking for Windows Live login credentials, completely with Terms and Conditions that ripping off: “By filling out this form, you authorize TST Management, Inc to spread the word about this 100% real and upcomming Messenger Community Site. By using our service/website you hereby fully authorize TST Management, Inc to send messages of a commercial nature via Instant Messages and E-Mails on behalf of third parties via the information you provide us.” Worst, the T&C is automatically accepted by the fake “logging in”. Another good trick by the phishers is sites that check who blocked you which asks for login information. Another rule here is not DO NOT enter your password on any suspicious sites.

Fact about Spam IM from MSN Friends with Malicious Links

1. If you do not click on the link, you are likely not infected and your password is likely not compromised.
2. Even if you ‘accidentally’ visit these sites, do not panic. As mentioned, most of these malicious activity operates by the way of phishing, i.e. stealing your user ID and password. For this to happen, you have to enter on the web page. Beside, with the evolution of modern web browser, most web pages, even if contain exploits, are unlikely to infect your system, unless you never update your system, use out-of-date browser or it happens to be ‘zero-day exploit’.
3. In most cases, when you receive such messages from your friend, it means that your friend MSN account has been hacked and compromised. It’s likely that your account is still intact, unless your friends receiving similar messages purportedly sent by you.

Resolution Steps to Remove or Clean the Windows Live Messenger MSN ‘Virus’

1. If you feel uncomfortable, install latest version of anti-virus program with updated virus signature pattern file, and run a complete scan of your system. To make the system security check complete, install and scan also with anti-spyware product (such as ZoneAlarm Anti-Spyware, Ad-Aware and Spyware Doctor), and anti-malware solution (such as Malwarebytes).
2. There are program that specializes in cleaning and removing MSN (Windows Live) Messenger viruses, such as Clean Virus MSN, MSNFix and MSNVirusRemoval. Install and run these programs to make sure that no virus or malware that target MSN Messenger or Windows Live Messenger exists.
3. Last but MOST importantly, change your password. Or more accurately, ask your contact who spam you in MSN Messenger to change his or her password immediately. By changing the Windows Live account password, spammer’s bot no longer able to access login on your behalf to spam the contact list. To change the Windows Live MSN Messenger password, follow these steps:
   1. Go to https://account.live.com/.
   2. Login to your Windows Live ID (MSN Messenger user name).
   3. On “Account” page, click on Change under “Password reset information” section.

      

   4. Enter existing password and new password. Click Save when done.

   If you can’t login to your account (unlikely as the messenger client uses the same password), follow these steps:

   1. Go to http://login.live.com/.
   2. Click on Forgot your password? link. If you are prompted with “Click a Windows Live ID to sign in” with your user name displayed, click on Sign in with a different account.
   3. Enter the MSN Windows Live email address, and type the characters captcha that appears in the Picture box, and click Continue.
   4. Click Send yourself a password reset e-mail message.
   5. Click Send Message.
   6. Click Done on the confirmation page.
   7. Login to the alternate email address that associated with the Windows Live account, and click on the link in the e-mail message to reset the password.
   8. On the “Confirm your e-mail address” page, type your e-mail address, and then click Continue.
   9. Type in new password and and then click Continue.
   10. Enter an alternate email address and click Continue or click Skip.
   11. Click Done when “You’ve changed your password” message is displayed.

Following is a long list of known URLs, link locations, and spam messages that been distributed all around the world. Some even smarter enough to send you another bye farewell message with :) smiley face.

http://www.rkntbp.info/
http://www.nkcfh.info
http://www.dbnyxc.info
http://www.qmnfct.info
http://www.mxbpkr.info
http://www.xjctsp.info
http://www.rhqwcp.info
http://www.mgtwdn.info
http://www.kfytsj.info
http://www.dsbpzg.info
http://www.gmnzby.info
http://www.dbnyzc.info
http://www.jcyhzr.info
http://www.dsbpzg.info
http://www.dbnyzc.info
http://www.bzjnxd.info
http://www.zjdgxq.info
http://www.qvsgwy.info
http://www.cdystp.info
http://www.hmybqw.info
http://www.yvmjzc.info
http://www.vmytks.info
http://www.nhcswv.info
http://www.ztmrcj.info
http://www.wkfbmt.info
http://www.fvkgcz.info
http://www.zcxrjb.info
http://www.jtyqkv.info
http://www.xhzsrg.info
http://www.hqnxmv.info
http://www.srbgxz.info
http://www.pghzvq.info
http://www.bgpmwr.info
http://www.ndkzcy.info
http://www.tpyhzx.info
http://www.unixxkpv.info
http://www.friendly-offer.com
http://www.shorty-link.com
http://www.shortifynow.com
http://checkdiz.info
http://click.and.be-c00l.info
http://minakossy.t0nez.info
http://0594.com/qifu/
http://www.Awe-s0me.info !!!!!
http://www.AcquireBonus.info
http://get-that-stuff.info
http://coooool.info
http://CrazyThingzz.com :D
http://your-msn-email.imagrshak.info
http://your-msn-email.imageswitch.info
http://your-msn-email.imagedino.info
http://your-msn-email.imageloko.info
http://your-msn-email.hosthdd.info
http://your-msn-email.imageloco.info
http://your-msn-email.holyimage.info
http://your-msn-email.lostimage.info
http://your-msn-email.picshak.info
http://username.youtubeimgs.com ?!?
http://username.myspacedimg.com
http://username.youtubeimgs.com
http://username.pixxchecker.com
http://5834255126/ ;)
http://www.faocazae.mobi ;)
http://www.mnmaro.net/ ;)
http://www.ccikan.net/ ;)
http://www.lrkcaa.net/ ;)
http://www.eoroal.net/ ;)
http://www.inonrc.net/ ;)
http://www.rnamot.net/ ;)
http://www.tnnnol.net/ ;)
http://www.karrac.net/ ;)
http://www.ttilia.net/ ;)
http://www.omoiii.net/ ;)
http://www.keteel.net/ ;)
http://www.cmcrtr.net/ ;)
http://www.imcalr.net/ ;)
http://www.rklmkr.net/ ;)
http://www.ikemtuxm.mobi ;)
http://www.zzgivdgo.mobi ;)
http://itis.ultracoool.com
http://username.xmas-party-pics.com
http://www.campaignsnation.com/ ;)
http://www.adnetworkssocial.com/ ;)
http://www.adnetworkscenter.com/ ;)
http://nu-years.awesomeofferz.com
http://awesome.quickgiftz.com
http://freewii.reallyc00l.com
http://its.hotdealss.com/
http://CoolestOfferz.com
http://www.LikeItLotz.com :-O (H)
http://GreatStufff.com
http://username.bl1ng.info
http://username.jumphost.info
http://username.n1cestuff.info
http://username.awes0me.info
http://username.ther1ng.info
http://username.snapsh0t.info
http://username.da-real-deal.info
http://username.ch33se.info
http://c0ol-th1ng.info
http://imgeshack.info
http://m0bil3.info
http://imagealina.info
http://hostapic.info
http://datsyou.com
http://is-thatt-you.com
http://is-dat-u.com
http://thatzyou.com
http://RealCoolThingz.com
http://yoimgz.com
http://partypartypics.info
http://specialofferforu.info
http://insanethingsforyou.com
http://burnoutpeeps.com
http://picsforparty.info
http://nustuff4u.com
http://my-prime-pics4u.com
http://img98247.ImageLoaderz.com/?user=username&pic=DSC01425.JPG
http://LikeThatStuff.com/?user=username .. coool xD !!
http://SuperCoolz.com <3 ^^ http://username.ImageHostz.com/?image=DSC00245.JPG ?!? http://ImageHostz.com/?user=username&image=DSC00245.JPG ?!? http://username.ImageShowz.com/?image=DSC00245.JPG ?!? http://ImageShowz.com/?user=username&image=DSC00245.JPG ?!? http://img19029.PicBuckets.com/?user=username5&pic=DSC00425.JPG http://img19029.PicBuckets.com/?user=username&pic=DSC00845.JPG http://img19029.PicBuckets.com/?user=username&pic=DSC01345.JPG http://img19029.PicBuckets.com/?user=username&pic=DSC01425.JPG :D (A) http://ilovethiz.com http://SweetStufff.com :D http://CrazyThingzz.com :D http://www1.StayFriendsForever.com/?invite=username http://www2.StayFriendsForever.com/?invite=username http://www3.StayFriendsForever.com/?invite=username http://StayFriendsForever.com/?invite=username@email.net http://ImageFreakz.com/?user=username&image=DSC00245.JPG http://ImageTalez.com/?user=username&image=DSC00245.JPG ?!? http://HotPiczz.com/?user=username&image=DSC00245.JPG ?!? ... HAHAHA!! :P http://img263.ImageStickz.com/?user=username&image=DSC00567.JPG ?!? ... HAHAHA!! :P http://username.home-picturez.com/ http://facebook-images.org/view.php?=username@emailaddress.com http://www.username.bobolak.com http://username.commshakz.com http://meet-your-im.com/ http://wipha_prom.gallery-shots.com http://username.my-great-party-pix.com http://username.crazy-college-party-pics.com http://username.dealsjid.com http://partyy.piclooks.com/?USERNAME http://theparty.piclooks.com/ http://host.piclooks.com/ http://username.piclooks.com/ http://those.awesomeofferz.com http://6876876.myartsonline.com http://thats.realdealzz.com http://username.PassionZz.com http://username.insaneimagz.com http://username.invite.AmazingThingss.com http://Passion.AweSomezz.com http://username.RealDealzz.com http://dabellix.yopicz.com/ http://username.mytubesz.com http://username.imglists.com http://youimgz.com http://username.tightpicz.com http://username.partytimess.com http://username.mypixxz.com/ http://username.picsearcherz.com http://username.megaimgx.com http:///username.picslists.com/ http://g00d-stuff.com http://email-adress.summarypic.com http://username.summarypic.com:1616 http://username.myimgzz.com/ http://username.playshost.com http://username.playshost.com:7474 http://email.playshost.com Http://username.youpichost.com http://username.thatzzyou.com http://username.imgshakz.com:6264 http://username.imgshakz.com:6969 http://username.imguser.com http://username.imguser.com:3636 http://username.imguser.com:6478 http://username.imgfriendz.com http://username.picfriendz.com:81 http://lynneke73.i-l0ve-u.com http://www.messengerspy.net http://nickname.friendlypixx.com http://username.historyshotz.com http://nickname.disco-fevers.com http://username.shapshots1.com http://ultraoffers.info http://carca.imagefrosty.info http://username.hostmedias.info/ http://username.locatehost.info/ http://username.smileshost.info/ http://www.imxuvovk.info http://imagecroco.info http://imagequick.info http://xxx.imagecrisp.info http://username.imageh0sting.info http://username.imagekick.info http://username.imagecherry.info http://imageorange.info/ http://www.username.coolest-stuff.info http://username.imagetorero.info/ http://username.image-banana.info http://username.imageshack.info http://www.In-sane.info http://username.loadpics.info/ http://username.b0unce.info/ http://username.ch3ckth1s.info http://username.luckyimage.info WOW username this website is giving away free Wal-Mart Gift Cards, hurry and get yours before they’re all gone go here http://username.cpacell.com check out these awesome pics from the awesome party LOL username.nustuff4u.com WOW username I found this great webpage that is giving away a free Best Buy Gift Card go sign up for yours before they are all gone http://username.colzop.com Album photo.zip oh you and me? nah its me the clown again lool someone put ur photo here: D i want you to swim with me! send this file to swim with me! lool someone put ur photo here: D lol someone has put your photo here: D I got so many messages about those acai berry pills that I decided to order them and guess what? I lost 23 pounds so far and its only been two weeks. I am living proof that they work and best part was, they only cost me five dollars to try over at http://weekvery.com I have been so skeptical lately on ways to lose weight, but I have to tell you, I found the way finally that works. I lost 23 pounds in the past two weeks with acai berry pills the same ones that were on oprah, they cost me only five dollars over at http://veryseer.com heyy look this ;) tr www.melodial.info http://PictureShotz.com/?user=username&image=DSC00245.JPG ?!? … HAHAHA!! :P Are you finally ready to lose some weight with no effort, well I am living proof that those acai berry pills everyone is talking about actually work, I lost 22 pounds in two weeks and it only cost me five dollars over at http://weekcall.com are you there? please get this ;) kenqqdn www.isHediyeLerIm.net hi. i think this is for you ;) gmrw www.themelodigrand.info Wanna lose a lot of weight without diets or excercise? Kathy and I have both lost over 31 pounds in a couple weeks just by taking Acai tablets daily, the same ones that Oprah talked about on her show. They are only five dollars to try, We get them from http://wadefund.com lok this website very funny. you can see blockers otwc www.SignPlusMe.info This is like a dream come true for me and my Becky. We both are living proof that Acai pills work to lose weight quick, we both lost over 30 pounds and still losing, no diet or excercise they just burn the fat off. Get them now for only five dollars at http://tillhides.com Sarah and Angie have both lost about 40 pounds each in just a few weeks, no diets no excercise just been taking those acai pills that Oprah had on her show. I been taking them now and dropped 27 pounds in just over 2 weeks. Get them now for only five dollars at http://chitfast.com I am done trying all the different fat burner pills out there. I finally found one pill that forces your body to drop a lot of weight very quickly. Its called Acai, costs just 5 dolars and I always order from http://makefew.com This is like a dream come true for me and my Becky. We both are living proof that Acai pills work to lose weight quick, we both lost over 30 pounds and still losing, no diet or excercise they just burn the fat off. Get them now for only five dollars at http://thanknows.com I have been taking Acai Berry now for over a month and already lost 36 pounds, it is the same stuff that was on the Oprah show, Mikey and Karine lost so much weight too with no diets or excersise. Get it now, its only five bucks a bottle, we are living proof that it works like magic. Get it over at http://claphere.com Howdy, I just spoke to Becca and Brice, and they told me to check out some pills they saw on Oprah. They said they lost 23 pounds in about amonth with them. Anyway you can find them here for only $5 http://clapflap.com Finally I lost over 31 pounds in less then a month, these new Acai tablets that Jess and I been taking are amazing. They just work super fast on your body fat without any diets or excerice best thing? Cost just 5 dollars over at http://tellflip.com *pleaese gettt thiis verry funny ;) www.NewMelodyBox.net please look and get it www.BonusCasinosContainer.net Sarah and Angie have both lost about 40 pounds each in just a few weeks, no diets no excercise just been taking those acai pills that Oprah had on her show. I been taking them now and dropped 27 pounds in just over 2 weeks. Get them now for only five dollars at http://highdid.com Hey , been a while since I found something this awesome. It let me lose 13 pounds in two weeks and only cost me 5 bucks. Check it out here http://highthan.com hey username look at itsgreat! http://username.so-cool-4u.com Gett youurr Bonussss rinngtoonee www.GiftAllGift.net very funny, look and get :p www.YourMusicGift.net Tony and Linda just told me to try these pills I saw at their place, Acai berry. They get them for $5 and they swear they lose weight. 11 pounds in two weeks they said. Anyways, I ordered up a bottle from the offer I found here: http://givenew.com hey username hey look http://username.fddofd.com hey username happy valentines’s day! this site is giving out free giftcards go get one before they’re all gone http://username.zuptag.com username check out these awesome pics from the awesome party LOL http://username.crazy-newyear-party-pics.com WOW username I found this great webpage that is giving away a free Ipod Nano for the Holiday Season, this is amazing go sign up for yours before they are all gone http://username.cpacell.com username check out these awesome pics from the awesome party LOL http://username.cool-xmas-pics.com WOW username I found this great webpage that is giving away a free $1,000 Gift Cards for the Holiday Season, this is amazing go sign up for yours before they are all gone http://username.cpacell.com username check out these awesome pics from the awesome party http://username.bobyup.com hey, looks alot like your pic or ? http://msngallery.awesomewebspace.com/index.php?=username@hotmail.com Check who has blocked you www.blockchecktoday.com Check who has blocked you www.blockcontrolled.net Check who has blocked you www.blockcontandchecke.info Look at this site www.blckchcknew.info click here and get your bonus ;) www.seahealthplus.info Get your Bonus Ringtone ;) www.BonusSoon.info ????????,???????:-) http://www.msnvoicecn.com Hey username this site is giving away free $250 dollar gift cards to starbucks but hurry before they are all gone http://username.bobzop.com username check out these awesome pics from the awesome party http://username.pics-at-the-party.com Hey username hey check this out this is amazing http://username.bambok.com username hey check this out this site tells you who has a crush on you, i found out the person i knew had a crush on me actually does, this is great try it out you’ll be surprised http://username.bakblu.com Hey username hey check this out this site tells you who has a crush on you, i found out the person i knew had a crush on me actually does, this is great try it out you’ll be surprised http://username.illzingya.com Hey username check this out go to this site and vote who will win the next game and they send you a jersey and a $250 gift card i got mine and it was so easy http://username.yourfavtns.info Hey username i found the best thing ever this is a new site that is giving away free giftcards for christmas after you give them your email i got mine in the mail go here to get yorus before they are all gone http://username.specialoffer4u.info username Hey check out the pics from the crazy party!! they are great LOL! go here to see http://username.amazingareaz.com