Never in my life that I am in a bad situation where I have to block my Windows Live Messenger/MSN contacts. I thought it would always be better to deal directly to the person rather than being ignorant.
Alas, I had to block 3 person in my contact list. It's not that we got into a grudge for girlfriends or money, their WLM account is sending annoying yet hazardous messages to me every few minutes. It has been months to years their account is compromised but they did not seem to notice any change. People, when someone tells you about your account being compromised, PLEASE do something about it. Your ignorance will not only be annoying but causing risk to others who may have clicked on your messages.
There are many variants of such virus but its propagation is pretty similar. The older variants send files all over the contacts. Can be named with .zip, .rar, .jpg or any file type. These file are usually small, in the range of few KB to 20KB size. Usually phrased with catchy words like "Hey, view my private photo!" or "Check out my new party pics!" or any other lame phrases including "Check out my XXX pictures". Please CHECK with the person for confirmation before accepting the file blindly.
The more recent method of propagation are HTTP link oriented. Similar lame phrases as above, including messages related to slimming pills, Viagra etc. Those links may look very real; for example http://photogbase.com/pictures.php/mengsuan. The virus are capable of intelligently adding names of yours or the sender. Again, do not open links or files when you're not expecting to receive any. Don't be a busybody.
If you have been infected, first thing to do is to try changing password. Some links are able to capture your password when you click on those malicious links. If it fails, you have no choice but to use Antivirus software, specific virus removal tools. For even more advanced users, the combination of Hijackthis and advanced virus removal tool such as Combofix may be used.
There wasn't many user friendly methods to remove WLM viruses that resides in your computer until a Messenger Plus! Live script came around. This script, named WLM Safe, requires Plus! plug in to be installed before you can use the script.
Link:
http://www.msgpluslive.net/scripts/view/505-WLM-Safe/Main Functions:
- Anti-Virus: detects and blocks infected links sent by virus in conversation windows.
- Anti-Phishing: detects and blocks phishing links sent by virus in conversation windows.
- Anti-Spam: blocks annoying spam messages sent by your contacts.
- Anti-Flood: detects flood attacks and block the authors.
- Anti-Freeze: block messages that make old messenger's versions crash.
- Anti-Copy: notifies you if one of your Messenger's contacts copy your Nickname.
- Anti-Bot: notifies you if you're chatting with a Bot.
- Anti-Hackers: notifies you if you're chatting with an Unsafe contact.
New Version Includes:
Threats Registry - Optional, logs all threats received.
Play Sounds - Optional, play sounds on popup notifications.
Process Registry - Detects infected running processes on computer.
Reduce Memory - Reduces ram memory used by Messenger.
Cache Cleaner - Deletes unuseful Messenger's temporary files.
I wish everyone a better WLM-ing experience.