Online Safety/Security FAQ

 
Notice from the AIM Service:
We apologize for any inconvenience you may have experienced as a result of last week's IM worm attack, which affected some users of the AOL instant messaging network.
 
The worm, which has been referred to as 'W32/Sdbot-ADD' and was accompanied by a rootkit, has been blocked from the AOL instant messaging network. In addition, the servers that controlled the worm have been disabled, meaning that any infected computers are no longer under the worm's influence.
 
For Affected AIM Users:
A new anti-virus software refresh should help identify any spyware or adware that this worm may have added to your computer.
 
For Affected AOL Members:
Effective Wednesday, November 2, 2005, AOL members who are using the McAfee virus protection service from AOL have been provided with an update that will enable them to prevent any further attacks by this particular type of worm.
 
General IM Hygiene:
We would also like to take this opportunity to remind our members and users not to click on links in IMs, even if they come from friends and family members on your AIM Buddy List feature. Take the time to reply to your Buddy and ask them what the link leads to, and why they sent it. If it was not sent intentionally, but rather sent by a bot, virus or Trojan horse, that will be made clear.

Frequently Asked Questions
 
Q. Can I get a virus through AIM? How do I safely share files with AIM?
 
Q. How can I protect my AIM account?
 
Q. What do I do if I receive an IM that I don't want?
 
Q. Are there any known security issues which might affect AIM?
 
Q. Why are there links in my profile, my away message, or in my IM window that I did not put there?
 
Q. How do I turn off AIM Presence on the Web for my screen name?
 
Q. Someone is sending instant messages to my cell phone. How do I stop them from contacting me that way?
 
Q. I've been getting commercial emails and I don't want to get them anymore. How do I get off the mailing list?
 
Q. What about SPAM?
 
Q. I hear people talk about SPIM. What is SPIM?
 
Q. I'm not sure if this email is for real, or if it's a scam. How can I tell?
 
Q. How can I control who sees me online and prevent IM's I don't want?
Q:  Can I get a virus through AIM? How do I safely share files with AIM?
A: Viruses can't be transferred through an Instant Message itself, but it is possible that files attached to an IM may contain viruses or trojans. Also, links sent in an IM may point to webpages that contain viruses and trojans. Even if you know who is sending you a file or a link, you should use caution in opening it. Some viruses/trojans can send harmful links that appear to be from a buddy you know. You should always use good virus protection software, such as McAfee VirusScan, for automatic scanning of all attachments. See AOL Keyword: AOL Virus Protection Center for more information or visit McAfee's Website.
 
Back to Top
Q:  How can I protect my AIM account?
A: Make sure you have a password that is difficult to guess but easy to remember, and that you change it frequently. Do not tell anyone your password. If you use a shared computer, you may choose not to use the Save Password feature on the sign-on screen.

There may also be security flaws in your operating system, web browser, or other software. These may allow a remote user to take control of your computer and capture your passwords or other personal data. There are several measures you can take to protect yourself from these security flaws, such as:
• Keep your virus software up to date.
• Keep your operating system software up to date by installing all security updates/critical updates:
-Microsoft Windows: http://windowsupdate.microsoft.com
-Apple Macintosh: http://www.info.apple.com
• Install personal firewall software, which will alert you to possibly dangerous data transmissions.
• Before clicking any hyperlink, even in an email or IM, move your mouse pointer over the link so that you can see the actual URL (web address) that the link is pointing to. This can give you a good idea of whether the link is safe to click. If you are not sure, ask the sender if they meant to send it to you (some viruses/trojans will send dangerous links in emails or instant messages to users in the infected machine's Buddy List or Address Book, so that the recipient thinks the link is safe because it came from you).
• If you are going to visit an unfamiliar web site, first take a moment to go to the Security preferences for your web browser and change the security level to High for the Internet Zone.
• Create a secure password with these tips https://my.screenname.aol.com/_cqr/help/infoPopUp.jsp?security_reg=1&lang=en&locale=us
• Change your password every three months
• Be sure to keep your e-mail address up-to-date by editing your profile information in your AIM client or going to https://my.screenname.aol.com
• For more safety and security tips, visit McAfee's tips page.
 
Back to Top
Q:  What do I do if I receive an IM that I don't want?
A: You can set up AIM to show a "knock-knock" message for people not on your Buddy List. This allows you to choose whether or not to accept messages from people who you may not know. If you accept the message, and do not wish to receive further messages from a particular screenname, you can block this screenname right from the IM form. Alternatively, you can Warn the other person. When you issue a warning to another AOL Instant Messenger user, the recipient's warning level increases and that user's ability to send and receive messages decreases. With enough warnings, the user can be prevented from exchanging any messages with anyone and may even be signed off. However, warnings are not permanent; the warning level decreases over time. If a user is warned off the service, the user can return after a "cooling off" period. You can see someone's warning level if you let the cursor hover over the person's screen name in your Buddy List window.
 
Back to Top
Q: Are there any known security issues which might affect AIM?
A: A security hole in the Windows version of Internet Explorer allows a malicious web site to run dangerous code on your computer if you visit that web site. The attacker can then control your computer, and sign on with your AIM Screen Name if your password is stored (although your password would not actually be revealed). If you think your computer has been compromised, you should immediately change all of your AIM passwords here. All users should immediately install the security patch, available from Microsoft at http://www.microsoft.com/technet/security.
 
Back to Top
Q:  Why are there links in my profile, my away message, or in my IM window that I did not put there and can't delete?
A: Some viruses/trojans can send harmful links that appear to be from a buddy you know. They can also replace your member profile with links to websites and replace the links even after you delete them. Click here to find infomation on how to fix the problem.
 
Back to Top
Q:  How do I turn off AIM Presence on the Web for my screen name?
A: You must enable the Allow List in the AIM client. This feature lets you manage who can see you online.
 
To enable the Allow List, click on My AIM > Edit Options > Edit Preferences.
 
Under the Privacy tab under "Who can contact me," click on either "Allow only users on my Buddy List" or "Allow only the users below." By choosing one of the above options, you will be limiting who can IM you on your AIM screen name as well as removing your AIM Presence from the Web.
 
If you are online but invisible, then other users will see you as offline. This case is true both inside the client and on the Web via AIM Presence.
 
Please visit the AIM Presence FAQ for additional information about AIM Presence, including how to contact the AIM team if your availability is being shown on a webpage without your consent.
 
Back to Top
Q:  Someone is sending instant messages to my cell phone. How do I stop them from contacting me that way?
A: As a recipient of messages from this service, you can easily manage who contacts you by using the block and unblock features described below. Note that the instructions below only manage the use of AOL Instant Messenger to contact a mobile device, and do not block text messages from other mobile devices.
 
Blocking a ScreenName
If you do not want to receive messages from a specific sender, follow these steps:
  1. Open a new text message.
  2. Type the ScreenName to be blocked in the body of the message.
  3. Send the message to the short code for the AIM Block feature:
    Alltel 265007
    Cingular Wireless 265007 or 4652*
    Cricket 265007
    T-Mobile 4652
    Verizon Wireless 4652
    (*Former AT&T Wireless customers.)
  4. You will receive a message confirming that the ScreenName is blocked and no longer able to send you messages
Alternatively, you can do the following:
  1. If your mobile phone has the ability to forward messages, forward a message from the ScreenName to your wireless service provider's short code for the AIM Block feature.
  2. You will receive a message confirming that the ScreenName is blocked and no longer able to send you messages.
Unblocking a ScreenName
If you want to receive messages from a person who previously has been blocked, follow these steps:
  1. Open a new text message
  2. Type the ScreenName to be "un-blocked" in the body of the message.
  3. Send the message to the short code for the AIM Allow feature:
    Alltel 265008
    Cingular Wireless 265008 or 4656*
    Cricket 265008
    T-Mobile 4656
    Verizon Wireless 4656
    (*Former AT&T Wireless customers.)
  4. You will receive a message confirming that the ScreenName is able to send you messages again.
Alternatively you can do the following:
  1. If your phone has the ability to forward messages, forward a message from the desired ScreenName to your wireless service provider's short code for the AIM Allow feature.
  2. You will receive a message confirming that the ScreenName is able to send you messages again.
Disabling the Service
If you choose to not take advantage of receiving messages from this service, you can choose to "opt-out" of the service. Once you have "opted-out" of the service, you can choose to "opt-in" to the service again at any time.
 
Stop Receiving Messages (Opt-Out)
If you want to stop receiving messages from AOL and AIM users, follow these steps:
  1. Open a new text message.
  2. Type the word "Out" in the body of the message.
  3. Send the message to the short code for the AIM Welcome feature:
    Alltel 265019
    Cingular Wireless 265019
    Cricket 265019
    T-Mobile 265019
    Verizon Wireless 265019
  4. You will receive a message confirming that you have opted-out and will no longer receive messages from AOL and AIM users.
Begin Receiving Messages Again (Opt-In)
If you opt-out, you can easily start receiving messages again by opting back in. To opt back in, follow these steps:
  1. Open a new text message.
  2. Type the word "In" in the body of the message.
  3. Send the message to the short code for the AIM Welcome feature:
    Alltel 265019
    Cingular Wireless 265019
    Cricket 265019
    T-Mobile 265019
    Verizon Wireless 265019
  4. You will receive a message confirming that you have opted-out and will no longer receive messages from AOL and AIM users.
Important: When you opt-in to the service again, any ScreenNames that you previously blocked will be automatically un-blocked when you opt back in.
 
Back to Top
Q:  I've been getting commercial emails and I don't want to get them anymore. How do I get off the mailing list?
A: The CAN-SPAM Act of 2003 (Controlling the Assault of Non-Solicited Pornography and Marketing Act) establishes requirements for those who send commercial email. The law, which became effective January 1, 2004, covers email whose primary purpose is advertising or promoting a commercial product or service, including content on a Web site. A "transactional or relationship message" - email that facilitates an agreed-upon transaction or updates a customer in an existing business relationship - may not contain false or misleading routing information, but otherwise is exempt from most provisions of the CAN-SPAM Act.
 
The law says the sender must provide a return email address or another Internet-based response mechanism that allows a recipient to ask the sender not to send future email messages to that email address, and the sender must honor the requests. The law requires that commercial email be identified as an advertisement and include the sender's valid physical postal address.
 
If the emails you are receiving are commercial in nature, they should contain opt-out mechanisms. If you receive a regular mailing, like a newsletter, the sender should have Unsubscribe information available at the registration site.
 
Back to Top
Q:  What about SPAM?
A: AIM's Advanced Spam Filtering will automatically move junk mail and unwanted mail into your Spam folder. This process is simple, automatic, and personalized based on how you use mail. There are 4 levels you can click to set the filter. The default, recommended setting is Medium.
 
To report a message as spam, click the check box next to the message you want to report. Then click the Report Spam button located at the top of the message list. Alternatively, you can click the Report Spam button when the message is opened. The message will be moved to the Spam folder and the AIM Mail spam filtering system will be improved to prevent future spam messages from entering your Inbox.
 
Once a message is placed in the Spam folder, it can be moved back to the Inbox by clicking on the checkbox next to the message, then clicking on the This is Not Spam button at the top of the message list.
 
Back to Top
Q:  I hear people talk about SPIM. What is SPIM?
A: SPIM is like spam, but over Instant Messenger programs. Spim typically contains a link to a website that the spimmer is trying to promote. Be wary of links sent via Instant Messenger, especially from users who are unknown to you.
 
Both the IM Catcher window and the Instant Messenger window include a link to Report IM Spam.
 
Back to Top
Q:  I'm not sure if this email is for real, or if it's a scam. How can I tell?
A: Phishing is a form of Internet-based identity theft. Phishers typically use upsetting or exciting (but false) statements asking for information such as user names, passwords, credit card or Social Security numbers and more. Phishing scams may take many forms, but they typically start with an e-mail or IM asking you to visit a Web site to update your personal information.
 
Learn more at Discover AOL: Phishing & Scams.
 
Back to Top
Q:  How can I control who sees me online and prevent IM's I don't want?
A: AIM provides many features to protect your privacy when online, and customize your online experience. AIM also allows you to control who sees you online, block Instant Messages, and ignore chat from someone in a chat room.
 
To control who can send you instant messages
  1. In the Buddy List® window, click My AIM followed by Edit Options then Edit Preferences.
  2. From the left Category menu, click Privacy
  3. Select your preferences for who can exchange instant messages with you, then click OK
The following privacy preferences are available:
  • Allow ALL: When you select this preference, any AOL or AOLŪ Instant Messenger? user can see that you are online and can send you instant messages.
  • Allow only People on my Buddy List: When you select this preference, only people whose screen names you have added to your Buddy List window can see that you are online and send you instant messages.
  • Allow only these users: When you select this preference and click the add names link, only the people whose screen names you add to the list can see that you are online and send you instant messages.
  • Block only these users: When you select this preference and click the add names link, only the people whose screen names you add to the list will be prevented from seeing that you are online and from sending you instant messages.
  • Block Internet Users: When you select this preference, only AOL members who are using the AOL software can see that you are online and send you instant messages.
  • Block all: When you select this preference, no one can see that you are online or send you instant messages.
To choose your security preferences
You can also control how you are notified when someone using the AOL Instant Messenger software or someone not on your Buddy List contacts you. You can do this in the area labeled IM/Chat/Mobile in the Edit Preferences section of AIM.
  • Show notifications for users on my Buddy List: Checking this preference will display a warning message before showing you instant messages from people on your Buddy List.
  • Show 'Accept Message' dialogue for messages from users not in my Buddy List: Checking this box will provide a warning message before showing you the name of the person contacting you via IM. While AIM strives to ensure that all users create appropriate screen names (and takes actions on the accounts of those who create inappropriate names), it is possible for someone to create a potentially offensive name. If you accept the message, and do not wish to receive further messages from a particular screenname, you can block this screenname right from the IM form.
If you choose to show a notification message for incoming instant messages, you can choose whether or not to accept messages from people you may not know. If you accept the message, and do not wish to receive further messages from a particular screenname, you can block this screenname right from the IM form.
 
Additionally, you can Warn others person by clicking the button on the IM form. When you issue a warning to another AOL Instant Messenger user, the recipient's warning level increases and that user's ability to send and receive messages decreases. With enough warnings, the user can be prevented from exchanging any messages with anyone and may even be signed off. Please note that warnings are not permanent and the warning level decreases over time. If a user is warned off the service, the user can return after a "cooling off" period.
 
Back to Top
If you are aware of a security problem with AIM, please click here to report it.