Erling Herstad

Hi.

We have a windows 2003 domain, with windows XP and a few W2K machines. The
past 2 days my users have reported being logged out from Messenger (Signed in
another place, even though some only use msn at work) and when it happens
contacts receive messages like:

http://HOTMAILUSERNAME.haha.they.have.taken.ph0t0s.info

I run norton corporate antivirus etc.

Any tips/hints?

With regards Erling

Andrew Carton

Just change your msn password, that should do the trick. Your password
was phished and is being used by an auotmated program.

hauer.marcel@gmail.com

If you open the link in IE, some users reported, it does not load at
the first attempt. Does anyone know if there run any bad scripts in
the background, which use IE security leaks? In Firefox the links
opens without a problem and a form prompts you for your MSN Login...

fr.heckroth@gmail.com

Today i have received that message "http://
HOTMAILUSERNAME_.has.send.you.ph0t0s.info" i have clicked on it but
when the page has been opened on Firefox, the page displays an error
message, such as pages "404" or "500", I immediately closed the page
and went to change my password MSN.

Somebody can find my pass when i click on that link ? same if i have
an error page?

Regards.

hauer.marcel@gmail.com

I don't think that anybody got your password only from clicking the
link. Normally you see a form which prompts you to put in you login
data.