Page 1 of 1

Help me here!

Posted: Wed Jan 04, 2006 5:12 pm
by FatherGhostface
I log on to my computer this morning and there right there are a MILLION messages from people saying "What the?" "This is a virus!!!" And my name "MichaelH2K0" giving out a link of some kind virus!!! Or at least that's what I think, this all happened while I was asleep last night!!! Who could've done this? I think someone's out to get me! They hacked to my account I think they sent people a virus from my computer!!! What should I do?

Posted: Wed Jan 04, 2006 5:25 pm
by Vildern
FatherGhostface,

Where did you see those million messages? On MSN?

See that your anti-virus program is up to date and then run a full system scan. See if that solves it.

Are you using Win XP? If so, make sure that the built-in firewall is on.

Then, I advise you to delete your account and create a new one.

EDIT: Download CWShredder and let it scan your ststem.
http://www.intermute.com/spysubtract/cw ... nload.html

Hmm, if you were referring to some sort of a forum, and not MSN, then...
Just delete your account and create a new one. Change your password.

Posted: Wed Jan 04, 2006 5:36 pm
by The Guy
I had the same thing happen to me about 6-8 years ago while using AOL.  They got into my account and used it to spam others.  It's not that it is someone out to get you, it's simply some asshole that found out how to access your account and use it to spam/send virus links to others.  Someone who has no morals at all.  This is basically a form of identity theft.  I would definately do what Vildern advises on deleting your account and making a new one.

Well

Posted: Wed Jan 04, 2006 6:16 pm
by FatherGhostface
I changed my password...?

Posted: Wed Jan 04, 2006 6:20 pm
by The Guy
I'm not understanding what you mean by that.  You just changed your password or you found out it was changed by someone else?

I

Posted: Wed Jan 04, 2006 6:23 pm
by FatherGhostface
I changed my password.

Posted: Wed Jan 04, 2006 6:26 pm
by The Guy
Ahh, ok then.  I'd be careful still.  After I first encountered my problem, I had changed my pass as well.  Before I knew it, it happened all over again. I think I changed my password 3-4 times and it just didn't help.  Be wary, be very wary.

Okay!

Posted: Wed Jan 04, 2006 6:29 pm
by FatherGhostface
Okay thank you! But let just ask you this, was the person that hacked into your account someone you knew? Or was it some random dumby trying kill peoples computers? And did anything happen to you after he/she did all that using your user name, like the police come or something?

Posted: Wed Jan 04, 2006 6:38 pm
by The Guy
As far as I know, it was noone I knew at all.  I've never given out my password to anyone and never will, just in case something like that happened.  Unfortunately it still did, go figure.  No police ever came or anything, but I did get locked out of my AOL account at least 2 times and my sister had to have the account pass reset.

Okay!

Posted: Wed Jan 04, 2006 6:40 pm
by FatherGhostface
Okay! I feel so much better now, thank you!  :D

Posted: Wed Jan 04, 2006 6:49 pm
by The Guy
No problem at all.  Good luck to you and hope it never happens again.

Posted: Thu Jan 05, 2006 7:19 pm
by Blackthorne519
Yeah dude.  I got that virus link from your AOL account.  The message didn't seem like you, and the link seemed funny so I didn't click it.

I thought someone may have hacked your IM account.


Bt

Oh my god!

Posted: Thu Jan 05, 2006 8:05 pm
by FatherGhostface
Oh my god! I can't believe someone would have the nerve to do something like that! I'm so sorry Blackthorne! I changed my password it won't happen again! What did they say to you? Can you think of their exact words? This may give me a clue to who it was.

Re: Oh my god!

Posted: Fri Jan 06, 2006 4:01 pm
by Blackthorne519
FatherGhostface wrote:Oh my god! I can't believe someone would have the nerve to do something like that! I'm so sorry Blackthorne! I changed my password it won't happen again! What did they say to you? Can you think of their exact words? This may give me a clue to who it was.

It was "LOL!" then the link.

It just seemed a little suspicious.  But, like I said - everything's okay.


Bt

SIGH!

Posted: Fri Jan 06, 2006 4:03 pm
by FatherGhostface
Okay, sorry again.  :cry

Posted: Fri Jan 06, 2006 5:54 pm
by moonlit
Hi,

If it was a regular email message the senders address (yours) might have been forged (which is very easy to do). Actually when contacting the mail server you can supply any 'send from' and 'send to' address. Anyone not aware of this will think the message came from you. The only give away is that the receiving mailserver adds the ip of the sending machine to the message. Looking at the headers of the message might reveal the real sender (in most cases these messages are send through a so called 'open relay' which is a badly configured mailserver that not properly adds the sending ip to the message).

If you know the address of your isp's mail server you can try this yourself

Code: Select all

telnet <address of your ips server> 25
help
MAIL FROM: anyemailaddressgoeshere
RCPT TO: emailaddrressofreceiver
DATA
Yadayadayada end with a line with a single dot
.

quit



For instance (lines starting with a number are replies from the server):

telnet moonlit.xs4all.nl 25
220 moonlit.xs4all.nl ESMTP Sendmail 8.12.11/8.12.11; Fri, 6 Jan 2006 18:45:51 +
0100
help
214-2.0.0 This is sendmail version 8.12.11
214-2.0.0 Topics:
214-2.0.0       HELO    EHLO    MAIL    RCPT    DATA
214-2.0.0       RSET    NOOP    QUIT    HELP    VRFY
214-2.0.0       EXPN    VERB    ETRN    DSN     AUTH
214-2.0.0       STARTTLS
214-2.0.0 For more info use "HELP <topic>".
214-2.0.0 To report bugs in the implementation send email to
214-2.0.0       sendmail-bugs@sendmail.org.
214-2.0.0 For local information send email to Postmaster at your site.
214 2.0.0 End of HELP info
mail from: billgates@microsoft.com
250 2.1.0 billgates@microsoft.com... Sender ok
rcpt to: myself@moonlit.xs4all.nl
250 2.1.5 myself@moonlit.xs4all.nl... Recipient ok
data
354 Enter mail, end with "." on a line by itself
Hi spammer
.
250 2.0.0 k06Hjp1F003033 Message accepted for delivery

Now if anyone replies to this message it will go to microsoft.com

Regards, Ron AF Greve[/quote]

Posted: Sat Jan 07, 2006 3:13 am
by Def Zeppelin
My friend was sending me a huge file overnight using AIM and he told me when he came back to his computer everything got deleted...it is just random idiots who are in their mid-age still living with their parents.  As for cops?  They don't care that your comp got hacked...I am pretty sure.

Posted: Thu Feb 16, 2006 1:36 am
by link5186
I saw this kind of problem pop up at my college campus. I figure it's some kind of scripting virus. Essentially, it takes control of whatever messenger (msn, aim, etc) and sends a link to the same virus to everybody on your contact list. It looks like you, but it's not. Most antivirus programs will take care of it. It doesn't appear to do much else, so I'd say it's mostly harmless (other than eating some system resources while it's running).

Posted: Mon Feb 20, 2006 8:04 pm
by Lambonius
FatherGhostface, the AIM-virus to which you are referring is actually something that is fairly common.  It happened to me several months ago and I did a clean install of my operating system before realizing that there is actually a number of different fixes out there for a number of different AIM-oriented viruses.  http://www.aimfilez.com/?id=virus has several of them available for download, however, a google search of something like "AIM virus" or "AIM virus fix" might yield more.  good luck.

Posted: Thu Feb 23, 2006 2:44 am
by Quest For Glory Fan
in order to prevent contracting this virus don't download files P2P that look stupid and are unusally small and don't click stupid links. I got it before from someone else that I trusted and I just uninstalled MSN and re installed and it was gone forever.