Spam Messages sent to me and Multi Request to add new friends

This has been a real issue for me now for about 2 months.

I have a lot of contacts on my Windows Live Messenger and somehow several of
them are sending me spam messages (like check out this great website.....)
now most of these friends don't leave their computers on, so it's not comming
from their computer, one is from my mums computer and for a while she hasn't
had internet access.

The messages usually try to lure you to click on a URL and end the message
with a BRB. Each time the message come through the person is Offline.

The 2nd big problem. Is recieving many requests a day to be added and had
added a new friend. I get this about 5-10 times a day, but my wifes computer
can recieve upto 50 a day and she only has 3 contacts and may use messenger
once every 2 months.

I looked over my mums computer and found Incredimail and some Fishtank
screen saver (also made or endorsed by incredimail) was linked to 2 different
programs running from the Temp Windows folder, the URLs that apeared attached
to the programs all come from Incredimail. After removing all the references
to them and even being a little harsh removing stuff from the registery it
fixed it for many weeks, but has now recently restarted.

It feels like the security of Messenger has hit an all time low.

Greetings,

They aren't sending you messages themselves. What's happened is that they've fallen for a
phishing scam, provided their Messenger credentials to third party which is now signing in as
them and sending out the advertisements. They need to change their Live ID password and any
other password using the same e-mail address RIGHT NOW. This can be done here:
https://account.live.com/ChangePassword.aspx

There's been an increase of bots adding people to their contact lists over the past month.
Keep in mind that those contacts which have provided their password (as above) now have
access to the entire contact lists of everyone they've phished. As such, these lists of true
e-mail addresses are now being sold to the highest bidders. That and the default settings to
allow people to add you to their Windows Live social networks (and Messenger), are the common
causes of this. You could change your e-mail address, but as you have no guarantee that
people on your contact list have changed their password or haven't given out their password
again, there's no guarantee that would work for any length of time. Also, you can change
your Windows Live social "network" settings here:
http://profile.live.com/Communication

In the end I expect we may end up with captchas when adding people and other schemes to put a
stop to this sort of thing. Not much one can do about people putting their credentials in
any web form that asks for it however.

--
Jonathan Kay
Microsoft MVP - Windows Live Messenger
MSN Messenger/Windows Messenger
MessengerGeek Blog: http://www.messengergeek.com
Messenger Resources: http://messenger.jonathankay.com
(c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
--




"Skozzy_AK" <> wrote in message
news:A2487F80-E609-42FE-8770-...
> This has been a real issue for me now for about 2 months.
>
> I have a lot of contacts on my Windows Live Messenger and somehow several of
> them are sending me spam messages (like check out this great website.....)
> now most of these friends don't leave their computers on, so it's not comming
> from their computer, one is from my mums computer and for a while she hasn't
> had internet access.
>
> The messages usually try to lure you to click on a URL and end the message
> with a BRB. Each time the message come through the person is Offline.
>
> The 2nd big problem. Is recieving many requests a day to be added and had
> added a new friend. I get this about 5-10 times a day, but my wifes computer
> can recieve upto 50 a day and she only has 3 contacts and may use messenger
> once every 2 months.
>
> I looked over my mums computer and found Incredimail and some Fishtank
> screen saver (also made or endorsed by incredimail) was linked to 2 different
> programs running from the Temp Windows folder, the URLs that apeared attached
> to the programs all come from Incredimail. After removing all the references
> to them and even being a little harsh removing stuff from the registery it
> fixed it for many weeks, but has now recently restarted.
>
> It feels like the security of Messenger has hit an all time low.
>

It all makes sence, I had asked those friends who are sending me these posts
to change their passwords on the website (and I said do it from another
computer).


"Jonathan Kay [MVP]" wrote:

> Greetings,
>
> They aren't sending you messages themselves. What's happened is that they've fallen for a
> phishing scam, provided their Messenger credentials to third party which is now signing in as
> them and sending out the advertisements. They need to change their Live ID password and any
> other password using the same e-mail address RIGHT NOW. This can be done here:
> https://account.live.com/ChangePassword.aspx
>
> There's been an increase of bots adding people to their contact lists over the past month.
> Keep in mind that those contacts which have provided their password (as above) now have
> access to the entire contact lists of everyone they've phished. As such, these lists of true
> e-mail addresses are now being sold to the highest bidders. That and the default settings to
> allow people to add you to their Windows Live social networks (and Messenger), are the common
> causes of this. You could change your e-mail address, but as you have no guarantee that
> people on your contact list have changed their password or haven't given out their password
> again, there's no guarantee that would work for any length of time. Also, you can change
> your Windows Live social "network" settings here:
> http://profile.live.com/Communication
>
> In the end I expect we may end up with captchas when adding people and other schemes to put a
> stop to this sort of thing. Not much one can do about people putting their credentials in
> any web form that asks for it however.
>
> --
> Jonathan Kay
> Microsoft MVP - Windows Live Messenger
> MSN Messenger/Windows Messenger
> MessengerGeek Blog: http://www.messengergeek.com
> Messenger Resources: http://messenger.jonathankay.com
> (c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
> --
>
>
>
>
> "Skozzy_AK" <> wrote in message
> news:A2487F80-E609-42FE-8770-...
> > This has been a real issue for me now for about 2 months.
> >
> > I have a lot of contacts on my Windows Live Messenger and somehow several of
> > them are sending me spam messages (like check out this great website.....)
> > now most of these friends don't leave their computers on, so it's not comming
> > from their computer, one is from my mums computer and for a while she hasn't
> > had internet access.
> >
> > The messages usually try to lure you to click on a URL and end the message
> > with a BRB. Each time the message come through the person is Offline.
> >
> > The 2nd big problem. Is recieving many requests a day to be added and had
> > added a new friend. I get this about 5-10 times a day, but my wifes computer
> > can recieve upto 50 a day and she only has 3 contacts and may use messenger
> > once every 2 months.
> >
> > I looked over my mums computer and found Incredimail and some Fishtank
> > screen saver (also made or endorsed by incredimail) was linked to 2 different
> > programs running from the Temp Windows folder, the URLs that apeared attached
> > to the programs all come from Incredimail. After removing all the references
> > to them and even being a little harsh removing stuff from the registery it
> > fixed it for many weeks, but has now recently restarted.
> >
> > It feels like the security of Messenger has hit an all time low.
> >
>
> .
>

Thank you for that, but does it also stop the spammers from adding you to
their contact list ? I've had to block at least 5 spammers doing this in the
last few days and it takes away from web meetings as the window pops up right
in the middle of the screen above the other windows unless i'm in full
screen.

"Jonathan Kay [MVP]" wrote:

> Greetings,
>
> They aren't sending you messages themselves. What's happened is that they've fallen for a
> phishing scam, provided their Messenger credentials to third party which is now signing in as
> them and sending out the advertisements. They need to change their Live ID password and any
> other password using the same e-mail address RIGHT NOW. This can be done here:
> https://account.live.com/ChangePassword.aspx
>
> There's been an increase of bots adding people to their contact lists over the past month.
> Keep in mind that those contacts which have provided their password (as above) now have
> access to the entire contact lists of everyone they've phished. As such, these lists of true
> e-mail addresses are now being sold to the highest bidders. That and the default settings to
> allow people to add you to their Windows Live social networks (and Messenger), are the common
> causes of this. You could change your e-mail address, but as you have no guarantee that
> people on your contact list have changed their password or haven't given out their password
> again, there's no guarantee that would work for any length of time. Also, you can change
> your Windows Live social "network" settings here:
> http://profile.live.com/Communication
>
> In the end I expect we may end up with captchas when adding people and other schemes to put a
> stop to this sort of thing. Not much one can do about people putting their credentials in
> any web form that asks for it however.
>
> --
> Jonathan Kay
> Microsoft MVP - Windows Live Messenger
> MSN Messenger/Windows Messenger
> MessengerGeek Blog: http://www.messengergeek.com
> Messenger Resources: http://messenger.jonathankay.com
> (c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
> --
>
>
>
>
> "Skozzy_AK" <> wrote in message
> news:A2487F80-E609-42FE-8770-...
> > This has been a real issue for me now for about 2 months.
> >
> > I have a lot of contacts on my Windows Live Messenger and somehow several of
> > them are sending me spam messages (like check out this great website.....)
> > now most of these friends don't leave their computers on, so it's not comming
> > from their computer, one is from my mums computer and for a while she hasn't
> > had internet access.
> >
> > The messages usually try to lure you to click on a URL and end the message
> > with a BRB. Each time the message come through the person is Offline.
> >
> > The 2nd big problem. Is recieving many requests a day to be added and had
> > added a new friend. I get this about 5-10 times a day, but my wifes computer
> > can recieve upto 50 a day and she only has 3 contacts and may use messenger
> > once every 2 months.
> >
> > I looked over my mums computer and found Incredimail and some Fishtank
> > screen saver (also made or endorsed by incredimail) was linked to 2 different
> > programs running from the Temp Windows folder, the URLs that apeared attached
> > to the programs all come from Incredimail. After removing all the references
> > to them and even being a little harsh removing stuff from the registery it
> > fixed it for many weeks, but has now recently restarted.
> >
> > It feels like the security of Messenger has hit an all time low.
> >
>
> .
>

Hi,

If someone has your address, there is no way of stopping them from adding you to Messenger
unfortunately.

--
Jonathan Kay
Microsoft MVP - Windows Live Messenger
MSN Messenger/Windows Messenger
MessengerGeek Blog: http://www.messengergeek.com
Messenger Resources: http://messenger.jonathankay.com
(c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
--


"Geoffrey Starr" <> wrote in message
news:68444F5F-1D2B-4547-B7D6-...
> Thank you for that, but does it also stop the spammers from adding you to
> their contact list ? I've had to block at least 5 spammers doing this in the
> last few days and it takes away from web meetings as the window pops up right
> in the middle of the screen above the other windows unless i'm in full
> screen.
>
> "Jonathan Kay [MVP]" wrote:
>
>> Greetings,
>>
>> They aren't sending you messages themselves. What's happened is that they've fallen for a
>> phishing scam, provided their Messenger credentials to third party which is now signing in
>> as
>> them and sending out the advertisements. They need to change their Live ID password and
>> any
>> other password using the same e-mail address RIGHT NOW. This can be done here:
>> https://account.live.com/ChangePassword.aspx
>>
>> There's been an increase of bots adding people to their contact lists over the past month.
>> Keep in mind that those contacts which have provided their password (as above) now have
>> access to the entire contact lists of everyone they've phished. As such, these lists of
>> true
>> e-mail addresses are now being sold to the highest bidders. That and the default settings
>> to
>> allow people to add you to their Windows Live social networks (and Messenger), are the
>> common
>> causes of this. You could change your e-mail address, but as you have no guarantee that
>> people on your contact list have changed their password or haven't given out their
>> password
>> again, there's no guarantee that would work for any length of time. Also, you can change
>> your Windows Live social "network" settings here:
>> http://profile.live.com/Communication
>>
>> In the end I expect we may end up with captchas when adding people and other schemes to
>> put a
>> stop to this sort of thing. Not much one can do about people putting their credentials in
>> any web form that asks for it however.
>>
>> --
>> Jonathan Kay
>> Microsoft MVP - Windows Live Messenger
>> MSN Messenger/Windows Messenger
>> MessengerGeek Blog: http://www.messengergeek.com
>> Messenger Resources: http://messenger.jonathankay.com
>> (c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
>> --
>>
>>
>>
>>
>> "Skozzy_AK" <> wrote in message
>> news:A2487F80-E609-42FE-8770-...
>> > This has been a real issue for me now for about 2 months.
>> >
>> > I have a lot of contacts on my Windows Live Messenger and somehow several of
>> > them are sending me spam messages (like check out this great website.....)
>> > now most of these friends don't leave their computers on, so it's not comming
>> > from their computer, one is from my mums computer and for a while she hasn't
>> > had internet access.
>> >
>> > The messages usually try to lure you to click on a URL and end the message
>> > with a BRB. Each time the message come through the person is Offline.
>> >
>> > The 2nd big problem. Is recieving many requests a day to be added and had
>> > added a new friend. I get this about 5-10 times a day, but my wifes computer
>> > can recieve upto 50 a day and she only has 3 contacts and may use messenger
>> > once every 2 months.
>> >
>> > I looked over my mums computer and found Incredimail and some Fishtank
>> > screen saver (also made or endorsed by incredimail) was linked to 2 different
>> > programs running from the Temp Windows folder, the URLs that apeared attached
>> > to the programs all come from Incredimail. After removing all the references
>> > to them and even being a little harsh removing stuff from the registery it
>> > fixed it for many weeks, but has now recently restarted.
>> >
>> > It feels like the security of Messenger has hit an all time low.
>> >
>>
>> .
>>

Sorry to butt in on this thread but... Really?! There is no way whatsoever
to disallow complete strangers from adding me to their contact list? Is
there at least a way for me to prevent the incoming contact requests on my
end? They are very annoying and I get anywhere from two or three to a dozen
a day. I've had this email address for a long time and reject your notion
that I have to change my email address because someone else screwed up and
gave out their login info.

"Jonathan Kay [MVP]" wrote:

> Hi,
>
> If someone has your address, there is no way of stopping them from adding you to Messenger
> unfortunately.
>
> --
> Jonathan Kay
> Microsoft MVP - Windows Live Messenger
> MSN Messenger/Windows Messenger
> MessengerGeek Blog: http://www.messengergeek.com
> Messenger Resources: http://messenger.jonathankay.com
> (c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
> --
>
>
> "Geoffrey Starr" <> wrote in message
> news:68444F5F-1D2B-4547-B7D6-...
> > Thank you for that, but does it also stop the spammers from adding you to
> > their contact list ? I've had to block at least 5 spammers doing this in the
> > last few days and it takes away from web meetings as the window pops up right
> > in the middle of the screen above the other windows unless i'm in full
> > screen.
> >
> > "Jonathan Kay [MVP]" wrote:
> >
> >> Greetings,
> >>
> >> They aren't sending you messages themselves. What's happened is that they've fallen for a
> >> phishing scam, provided their Messenger credentials to third party which is now signing in
> >> as
> >> them and sending out the advertisements. They need to change their Live ID password and
> >> any
> >> other password using the same e-mail address RIGHT NOW. This can be done here:
> >> https://account.live.com/ChangePassword.aspx
> >>
> >> There's been an increase of bots adding people to their contact lists over the past month.
> >> Keep in mind that those contacts which have provided their password (as above) now have
> >> access to the entire contact lists of everyone they've phished. As such, these lists of
> >> true
> >> e-mail addresses are now being sold to the highest bidders. That and the default settings
> >> to
> >> allow people to add you to their Windows Live social networks (and Messenger), are the
> >> common
> >> causes of this. You could change your e-mail address, but as you have no guarantee that
> >> people on your contact list have changed their password or haven't given out their
> >> password
> >> again, there's no guarantee that would work for any length of time. Also, you can change
> >> your Windows Live social "network" settings here:
> >> http://profile.live.com/Communication
> >>
> >> In the end I expect we may end up with captchas when adding people and other schemes to
> >> put a
> >> stop to this sort of thing. Not much one can do about people putting their credentials in
> >> any web form that asks for it however.
> >>
> >> --
> >> Jonathan Kay
> >> Microsoft MVP - Windows Live Messenger
> >> MSN Messenger/Windows Messenger
> >> MessengerGeek Blog: http://www.messengergeek.com
> >> Messenger Resources: http://messenger.jonathankay.com
> >> (c) 2010 Jonathan Kay - If redistributing, you must include this signature or citation
> >> --
> >>
> >>
> >>
> >>
> >> "Skozzy_AK" <> wrote in message
> >> news:A2487F80-E609-42FE-8770-...
> >> > This has been a real issue for me now for about 2 months.
> >> >
> >> > I have a lot of contacts on my Windows Live Messenger and somehow several of
> >> > them are sending me spam messages (like check out this great website.....)
> >> > now most of these friends don't leave their computers on, so it's not comming
> >> > from their computer, one is from my mums computer and for a while she hasn't
> >> > had internet access.
> >> >
> >> > The messages usually try to lure you to click on a URL and end the message
> >> > with a BRB. Each time the message come through the person is Offline.
> >> >
> >> > The 2nd big problem. Is recieving many requests a day to be added and had
> >> > added a new friend. I get this about 5-10 times a day, but my wifes computer
> >> > can recieve upto 50 a day and she only has 3 contacts and may use messenger
> >> > once every 2 months.
> >> >
> >> > I looked over my mums computer and found Incredimail and some Fishtank
> >> > screen saver (also made or endorsed by incredimail) was linked to 2 different
> >> > programs running from the Temp Windows folder, the URLs that apeared attached
> >> > to the programs all come from Incredimail. After removing all the references
> >> > to them and even being a little harsh removing stuff from the registery it
> >> > fixed it for many weeks, but has now recently restarted.
> >> >
> >> > It feels like the security of Messenger has hit an all time low.
> >> >
> >>
> >> .
> >>
>
> .
>

"Skozzy_AK" wrote:

> This has been a real issue for me now for about 2 months.
>
> I have a lot of contacts on my Windows Live Messenger and somehow several of
> them are sending me spam messages (like check out this great website.....)
> now most of these friends don't leave their computers on, so it's not comming
> from their computer, one is from my mums computer and for a while she hasn't
> had internet access.
>
> The messages usually try to lure you to click on a URL and end the message
> with a BRB. Each time the message come through the person is Offline.
>
> The 2nd big problem. Is recieving many requests a day to be added and had
> added a new friend. I get this about 5-10 times a day, but my wifes computer
> can recieve upto 50 a day and she only has 3 contacts and may use messenger
> once every 2 months.
>
> I looked over my mums computer and found Incredimail and some Fishtank
> screen saver (also made or endorsed by incredimail) was linked to 2 different
> programs running from the Temp Windows folder, the URLs that apeared attached
> to the programs all come from Incredimail. After removing all the references
> to them and even being a little harsh removing stuff from the registery it
> fixed it for many weeks, but has now recently restarted.
>
> It feels like the security of Messenger has hit an all time low.
>