|Received virus email that points to a spam site||theshufits||2/5/10 8:13 PM|
|Re: Received virus email that points to a spam site||esoltys||2/6/10 12:12 AM|
Friend's computer is doing the same.
She's sending links out to same content as you're reporting being hosted on Google Sites. Spam is being sent in blocks of 10 addresses from her Hotmail account.
Latest one was: http://sites.google.com/site/bbsef65gss/gnsl7r
Russian content which points towards: http://hyhfetlo.com/ selling viagra and crap.
|Re: Received virus email that points to a spam site||mcorbett72||2/11/10 7:29 AM|
|Re: Received virus email that points to a spam site||BruceofCA||2/13/10 2:52 PM|
I had the same problem with this Viagra, etc company from Canada http://sites.google.com/site/okxonvrdbj/lttzvyoc10I
They are using site.google to send to all of my Yahoo or Hotmail contacts, not sure which. I did have a Yahoo csv file in my computer backup, but took it off.
I do have a sites.google.com website also.
All of my contacts will block me, since this Canadian spammer sent it using my Yahoo email address. Do I have to terminate my Yahoo email address?
|Re: Received virus email that points to a spam site||joehms22||2/18/10 6:41 PM|
I have gotten the same emails from a friend who has a hotmail account, I am also being directed to a google sites address, however before that I was at another site, that redirected me there, the characters looked Russian to me, however I cannot confirm this.
|Re: Received virus email that points to a spam site||theshufits||2/18/10 7:04 PM|
I was able to successfully go to the Report Spam link by modifying an existing link.
So in my example, I was being sent here:
Note that the main site is called "gbaykykdfe" and the subpage is called "7zuk77kmer"
If I added "system/app/pages/reportAbuse?src=/" in between the slash between those two parts, I get the following link which was useful to bring up the report abuse page by manually copy/paste:
After submitting, I was able to get the message "Отчет о неправильном использовании сайта отправлен" which using Google Translate says that "Report of incorrect use of site sent" at the top in yellow, but the rest of the page still is active. I presume that means that my request went through. Not sure if someone who speaks Russian fluently could comment.
|Re: Received virus email that points to a spam site||helloyou101||3/7/10 12:12 PM|
|Re: Received virus email that points to a spam site||krwe54301||3/9/10 7:17 AM|
I have a similar problem. This has happened now twice. First time was on February 15th. Second time was yesterday.
Yesterday site examples.
It appears to be sending it in groups of 10, and it's not JUST sending them to my contacts. It appears to be sending email from my account to anyone I've ever had email from or sent email to.
What does the user do? How do I prevent this from happening again?
|Re: Received virus email that points to a spam site||spikespencer||4/3/10 11:02 PM|
Anyone want to explain this? I am extremely careful with my email to prevent things like this from happening. How exactly did a spambot manage to get control of my email account? I had my gmail open was not doing anything with it had not submitted my email to anything and out of the blue I get a bunch of undeliverable messages to the few people I have sent email to over the years who no longer have a valid email.
Someone needs to look into this.
|Re: Received virus email that points to a spam site||tpaine||4/5/10 9:55 AM|
Just received an email from a friend sending me to this
My OS: Vista Premium
My Browser: Firefox 3.6.3
Should I be worried about a cross site hack here? Should I change my password? The lack of official information in this thread is disturbing though I understand this is a Google Sites forum not a gmail one I would still hope that the issue was looked into so we could at least know what form of attack we are dealing with.
|Re: Received virus email that points to a spam site||tpaine||4/5/10 9:57 AM|
Oh, and I received the email from a gmail account.
|Re: Received virus email that points to a spam site||spikespencer||4/5/10 11:37 AM|
Yeah it was my gmail account that was exploited. If something happens to my hotmail account I would not be surprised. The moment I realized it happened I changed my password. I reported everyone of the sites for abuse but I am not expecting anything to be done no matter how much I am hoping for Google to report the IP creating all of these sites and secure their gmail better. I did nothing that would have allowed gmail to do that I did not go to any site I know nothing came in the form of a virus the only thing possible is a job application I filled out but I have no idea how that could have hacked my gmail account.
|Re: Received virus email that points to a spam site||theshufits||4/6/10 8:04 PM|
@krwe54301 - Changing your password might be a good idea.
Still, changing your password is not a bad idea unless you have trouble remembering passwords. At the end of the day, it will depend upon how paranoid you are.
@spikespencer - It's really hard to say what happened without more information and knowing what countermeasures and precautions you have taken. It's most likely due to somehow the hackers got your password or a machine you were using was compromised. On a similar note, this was a good article on how hackers steal passwords.
I think it's good that you reported the abuse. It took a long time, but the site I originally reported the abuse on in this thread seems to finally be down after I checked it today.
|Re: Received virus email that points to a spam site||chris0224||4/7/10 10:03 AM|
|Re: Received virus email that points to a spam site||jjwwee||4/7/10 12:47 PM|
I have had a similar problem where an email containing a single link was sent out to all of my gmail contacts from my gmail account in blocks of 20.
System: Windows XP
Browser: Firefox 3.6.3
|Re: Received virus email that points to a spam site||ChrisTea||4/8/10 12:59 PM|
A friend's e-mail address sent this link to me and about 10 other people:
Appeared to have Viagara for sale, but I didn't wait around long enough to investigate further.
|Re: Received virus email that points to a spam site||spikespencer||4/9/10 5:28 AM|
I know it was not the network nor the PC I was using. So ten centuries on my password...
Yeah I would really like to know how they did this. It sounds like someone has found an exploit on gmail so they were able to access it without a password. This after they added https.
|Re: Received virus email that points to a spam site||Templeton||4/9/10 10:35 AM|
|Re: Received virus email that points to a spam site||bekriya||4/11/10 12:29 PM|
|Re: Received virus email that points to a spam site||Liz Stelz||4/12/10 4:10 PM|
Somebody (or something) hijacked all of the addresses in my AOL address book and began sending out the Google viagra link - even to my broker! I took the drastic step to erase all of the addresses in my address book AND do a complete virus scan of my computer AND add additional protections to my email AND made sure that AOL does not auto-add any names to my address book. Now, the people who have sent me emails in the last 5 days are getting the messages again! What's going on? My computer does not have a virus. It even happens when my laptop is turned off and unplugged like it was this weekend. Any help out there?
|Re: Received virus email that points to a spam site||spikespencer||4/13/10 2:58 AM|
@Liz Stelz The moment I found out what was going on I changed my password. Whoever is doing this is not using a virus to exploit your mail, neither are they using your contact list but as near as I can tell they are using your password and email combination to extract your reply to list your email provider keeps which is not something you can clear. I have not had any problems since I changed my password but I still want to know what they used to get my password in the first place.
|Re: Received virus email that points to a spam site||effad||4/13/10 6:04 AM|
|Re: Received virus email that points to a spam site||gernst||4/13/10 6:47 AM|
Same thing happened to me the other morning. Email was sent from within my gmail account, the sent items folder had the originals. It didn't just send to people in my contact list, but everyone I had ever sent an email to. I know this because there are email addresses on there I don't have in my contact list, but that I send to often.
I changed all my passwords (they were complex passwords to begin with. 9 characters, with numbers, and mixed case, no dictionary words) I also noticed that my security question was changed from my normal question to "frequent flyer number." I don't have frequent flyer miles.
Below are the sites I was "sending" out.
|Re: Received virus email that points to a spam site||joeomar||4/13/10 8:40 AM|
I had this happening from my AOL account. It appears to have used the list of address from which I have RECEIVED emails in the past, it sent emails to addresses that are not in my "Contact" list or my Outlook. In fact some of them were sent to addresses that I can't possibly have sent to before because they don't RECEIVE emails, like the email address used by the Wall Street Journal to send out their daily news summaries. This happened to me repeatedly over the course of a week. Then I changed my AOL password about two weeks ago, and the problem stopped completely, I haven't had any emails sent out since. According to the messages posted on this board, this problem has been happening to people with email accounts from SEVERAL different email providers, not just AOL - gmail and hotmail for example. This implies someone has gotten access to passwords from many different service providers; that seems unlikely but why else does changing the password seem to fix the problem? This situation is DISTURBING and someone needs to start serious investigation on what's going on. This is not a Google Sites problem - their only involvement is that the bogus email has a link to a site on their server. WHERE ARE THE ANTI-VIRUS COMPANIES? THEY'RE the ones who should be investigating this.
|Re: Received virus email that points to a spam site||Liz Stelz||4/13/10 9:02 AM|
Thanks all. I shall try the password change. My friends now think that I think something is wrong with them since "I" keep sending them viagra sites!!
|Re: Received virus email that points to a spam site||JohnDizzle||4/16/10 5:09 PM|
I just finished repairing a clients computer with this problem. There is no malicious software on the system itself, so scanning it will not resolve the problem. This is what you can do to prevent this from happening:
1) Change your email password immediately.
2) Go to C:\Windows\System32\drivers\etc and edit the hosts file.
Add the following line to page: 127.0.0.1 sites.google.com
This will block any attempts your computer will make to connect to any of those sites. Many of which not only contain ads but also keyloggers/fake email logins. Although this will block any site with the prefix sites.google.com, this shouldn't really be an issue as any site worth visiting will have its own domain name. This fix does not render any other part of google sites inoperable, just the sites.google.com Google needs to fix this, until then I do not recommend visiting these sites.
|Re: Received virus email that points to a spam site||CalforniaPing||4/25/10 9:39 PM|
my account started to send out these emails as well...
is it because my password was too simple?
is there a virus or does someone have my old password?
|Re: Received virus email that points to a spam site||spikespencer||4/26/10 4:23 AM|
No virus, someone has your old password. Make sure you change it to something with a Capitol letter a number and a symbol.
|Re: Received virus email that points to a spam site||Neight||4/26/10 5:38 AM|
This has now happened to a coworker and my girlfriend. Both of them sent these spam sites from their gmail. the coworker isn't stupid, and although my girlfriend is not tech savvy at all, she only ever visits like two sites besides her email. I'm not sure how they're compromising gmail accounts, but I've promptly updated my password in paranoia. I couldn't stand to lose my gmail. Someone please get on this and see how they're getting passwords. I'm worried its some trick that I'm not prepared for.
|Re: Received virus email that points to a spam site||spikespencer||4/26/10 6:27 AM|
Exactly, I would really like to see someone looking into this since I am behind quite a firewall and use safe browsing techniques. I am not sure how they are getting these passwords but it is a bit disturbing that they are getting them considering this is the first time in 15 years my email or anything else was compromised due to how careful I am. Some people I can understand how this could happen to them but quite a few people like myself are fairly adept at avoiding this kind of thing from happening.
|Re: Received virus email that points to a spam site||dounoit||4/28/10 7:21 AM|
I have seen a couple of friends emails compromised and now this has happened to me twice. I changed my password immediately but will have to wait and see if it made a difference. It is good to note that this also happened to another aol account I have setup gmail to pull mail from via pop. Let me know if your intersted int he google site urls but I don't want more people clicking on them and potentially getting their passwords stolen...
|Re: Received virus email that points to a spam site||dounoit||4/28/10 7:22 AM|
Forgot to mention, I have a very complicated password that would take a tool a very long time to decrypt if even possible....
|Re: Received virus email that points to a spam site||Steegle||5/3/10 2:49 PM|
I have visited every reported site and have not been hacked.
|Re: Received virus email that points to a spam site||spikespencer||5/7/10 4:58 AM|
Same here I have not had any problems going to the sites but at the same time it would stand to reason the group doing the hacking is also the one writing the sites.
|Re: Received virus email that points to a spam site||BobLawbla||5/24/10 5:30 PM|
I received reply emails from friends in my contact list on Hotmail asking me why I was sending them a link to an erectile dysfunction med website; Viagra, Cialis, etc. I looked in my sent mail box and saw that somehow something had sent (in blocks of ten) emails to everyone on my list; my attorney, three or four prospective employers, an old Church Lady friend, ex-girlfriends, etc.
I sent out an apology to everyone on my list (except the ex-girlfriends) for the spam link. I then did a complete scan with Malwarebytes and these two adware bugs are all it found:
C:\Program Files\Windows Live\Messenger\riched20.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Windows Live\Messenger\msimg32.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Don't know where I picked it up but I have deleted photos and Power Point Presentations that were attached to my inbox email the past few days. I'm not sure if the above deleted adware files were powerful enough to take over my mailing list but we'll see.
My machine afterward would not restart and I had to use a Vista Rescue CD to start my machine. I did the Malwarebytes scan and hope that was it. Otherwise is "system restore" for me.
It be honest, as embarrassing as it is to have potential bosses, old ladies and ex-girlfriends receive it wasn't the end of the world I guess. And I imagine if it happened to someone else I might even chuckle.
|Re: Received virus email that points to a spam site||j_e_l_l_o||8/8/10 9:06 AM|
I only check my aol mail from my mobile phone(using the software that came with it).. haven't entered my password into an actual machine for over 2 years, tho I have been taken by this supposed virus and in the last 2 weeks i've sent out 2 lots of emails to everyone i've ever received an email from.
this is happening to a lot of people that I know from many different email services.
have changed my password now, but would be interested in knowing both how they pulled it off and why the only sent messages to the addresses we've received email from instead of contacts, etc.
thanks for the help from others on here!
|Re: Received virus email that points to a spam site||sholzy||8/28/10 8:40 PM|
After reading through these posts, I started thinking about something. Do any of you have Facebook accounts using your compromised email address?
I also have had spammers using my Yahoo address book. This account is also used for Facebook and I have allowed several different applications access to my email. I have just changed to a new email address just for Facebook and I'll see how long it will take for spammers to hijack this account.
If my thinking is correct then either a spanner used a rogue application to harvest addresses or a application server database was compromised to steal email addresses.
|Re: Received virus email that points to a spam site||ReneeRox||9/20/10 2:21 PM|
People!!! the corelation is that you received the link from someone you know and you clicked it. It installed the virus or whatever it is and then accessed your address book and sent it on to them as well. STOP CLICKING ON THE LINKS AND YOU WILL STOP PERPETUATING THE VIRUS.
|Re: Received virus email that points to a spam site||croco||9/28/10 9:29 AM|
has anyone figured out what is really causing this?
|Re: Received virus email that points to a spam site||fondu||10/7/10 9:52 AM|
i just got hit with this virus today and i know for a fact that i never clicked on any of the links that i'd received previously
|Re: Received virus email that points to a spam site||Steegle||10/7/10 4:26 PM|
|Re: Received virus email that points to a spam site||ReneeRox||10/7/10 8:09 PM|
yes, I'm reading. And if people aren't clicking on the link, they how do they know where it's leading them? I have gotten so many emails from friends with strange links in it and always delete them and so far, haven't been hit with the virus.
UPDATE: I just received another email today and now it not only contains a link but now includes text. This is what it said:
hi! My Family!
Best regards, [the sender's email address]
So when warning people about this virus you now have to tell them to be careful of the text that comes along with it.
|Re: Received virus email that points to a spam site||fish100||11/3/10 2:10 PM|
|Re: Received virus email that points to a spam site||piccolbo||11/17/10 10:10 AM|
|Re: Received virus email that points to a spam site||apresson||12/2/10 9:05 AM|
My aunt was afflicted by a virus that behaves similar to what people are describing here. It sent spam e-mails to all of her contacts from her e-mail address (comcast.net). I was getting about 2-3 spam e-mails a day from her, so when I visited her over thanksgiving, I tried to fix the problem. I downloaded and installed sophos antivirus, which detected and deleted a malicious file. I set her up with a gmail account, and in the process I logged in to my gmail account from her computer to show her how gmail works. Argh, big mistake!
I guess the virus was still on her system, because it appears to have grabbed my e-mail address and has now been spamming people from my account. I ran sophos antivirus on my own computer, and no malicious files were found. I then changed my password from my computer and this has NOT fixed the problem.
Does anyone have ideas on what I can do?
Here's my OS/browser/spam url, followed by a sample e-mail that was sent from my account.
sites url: www.yang-fangfang2.com
OS: windows 7
browser: firefox 3.6.12
Subject: Hello,Good day!xyrbdb!
I found a good website last week: One of my friend bought a Cell
Phones, and he got the product in one week. Its quality is very good
and the price is competitive.
Now look here ( www.yang-fangfang2.com ), best gifts for new
year 2010 save up to 30%!
I am sure you will get many surprise and benefits.
please forgive me for this email if you are not interested in anything
|Re: Received virus email that points to a spam site||spikespencer||1/7/11 9:55 PM|
At least Microsoft takes spam and viruses seriously. I am giving up the google thing for a while.
|Re: Received virus email that points to a spam site||BrowneKnows||1/27/11 12:47 PM|
I'm running on a Mac and I have this problem. Macs don't get viruses.
I don't have anything appearing in any "sent" box online OR offline. I don't even use my yahoo account except through entourage, but the recipients are definitely coming from my yahoo contact list, though. My igoogle account keeps logging back in any time I do sign into yahoo to look for missing emails that went to spam. The more I read, the more I'm starting to think this is an igoogle thing, not yahoo. I changed my yahoo password, but not my igoogle to test my theory. If anything sends again, I'll change my igoogle password and wait. My yahoo account happens to be my primary email for igoogle.
|Re: Received virus email that points to a spam site||rosiedwyer82||2/14/11 4:07 AM|
Powerhouse I have found the folders and file you described, however I do not have the software to save it in the correct file type... I tried doing this in notepad, however I had to re-save as hosts1. Could you suggest what the best way to go about it is???
|Re: Received virus email that points to a spam site||Sarago||6/12/11 4:45 AM|
I also receive an email, from my husband, that seemed very strange in that it read "I felt pressure to be the bread winner for my family I wasnt feeling like myself this couldnt have come at a better time!!" followed by a very long and strange link, with some additional text similar to the aforementioned. I saw that the email was sent to basically everyone in his contact list, and I called him just to confirm that he did not send it (duh) and yep, he had received a similar email about an hour and a half earlier.
I did not see any immediate changes, and proceeded to delete the email after sending a mass warning email to all of my contacts with the warning and beginning text quoted above in the subject line.
NOW I am trying to do research for a college paper and almost every link leads to a link farm site. Every site that would be important to my research leads to a link farm or other lame and unnecessary site. One site was a cancer research site, but I clicked on a Discovery link that should have led to global climate change timeline information! I am so frustrated, I can't find any info online and finally I found this thread.
I NEED a fix for this, I am a college student and I have a paper due. I need to conduct research! :(
|Re: Received virus email that points to a spam site||Oscar.Mart44||10/4/11 8:48 AM|
Here's the simple answer:
You, or someone you are friends with on Facebook or who you email, HAS a virus on their computer or "allowed" a malicious Facebook app in their FB profile.
1. You clicked a malicious link sent by them if YOUR computer is sending spam.
2. If you are only RECIEVING spam emails then THEY clicked the malicious link on THEIR computer.
End of story. Delete the Facebook app or remove the virus. Changing your email password wii not fix your problem.
|Re: Received virus email that points to a spam site||mehrotra001||10/30/11 3:10 AM|
http://slaby-szop.cba.pl/RichardHill30.htm is stealing mail IDs of my friends and sending back its' own adds from their mails. I have received several such adds from this site via e.mails of my friend,eg;
from anil kapoor anil_po...@yahoo.com
im finally turning my life around this gave me confidence when I needed it most now im headed straight for the top you could do it too
talk to you later.
PLEASE TAKE STERN ACTIONS....MEHROTRA001@GMAIL.COM
|Re: Received virus email that points to a spam site||soulessginger||11/27/11 8:52 PM|
I have the same problem!!! I thought I could fix it by canceling my aol account, but so far I am having trouble contacting AOL.
|Re: Received virus email that points to a spam site||obernhardt||11/29/11 11:59 AM|
I received this link from a email of another user of our google group: Dear Sir or Madam:
Is his machime with a virus, worm or something else?
and, where may I report the sites linked? (talibanpharmacy, hyofgickodd or gmidistribuidora
|Re: Received virus email that points to a spam site||obernhardt||11/29/11 12:02 PM|
The mail was received on pop3 account, Outlook Express, WinXP
|Re: Received virus email that points to a spam site||esoltys2||1/24/12 9:46 AM|
Same, the infection seems to be coming from hotmail. My brother's account has emailed 5 email addresses (ebgames.com included, which is a newsletter no reply email address), with the subject "RE:3", and this as content: "This is the only place where you can find everything you need! http://travaillerdechezsoi.org/best.link.php?seten_yahoo=64jd5". Not going to the site since this is a work machine.