A friend just signed in and seems like all her contacts were sent the below link.
after "profile=" was the contacts name. I've removed this, but I'd still advise not clicking the link.
www(dot)msn.unknowntools.com/msn/msn.php?s=fJiyYj&id=7145&profile=
Google doesn't seem to turn up any results.
Anyone? 
edited to stop it appearing as a link.