geduxk
Sun Sep 9 2007, 18:39
if you have pm from frend this link labas
http://www.what.net/erotic-gallery...5d8c/dsc027.jpg its a virus
Edited Link By TheUberOverLord
Please NEVER post links that could be harmful in the forum, ask for our attention
spud5
Sun Sep 9 2007, 19:19
WARNING
The file in the above post is not a .jpg image, so do not be tempted to click.
EdjKa
Sun Sep 9 2007, 19:24
QUOTE(spud5 @ Sun Sep 9 2007, 19:19) [snapback]439311[/snapback]
WARNING
The file in the above post is not a .jpg image, so do not be tempted to click.
All , look here LINK REMOVED, it's my community forum , some contacts send me link , like i posted there , this is also virus , don't even try to open this link from your skype contacts
Edited to remove link because had link to another bad link TheUberOverLord
snoethlichs
Sun Sep 9 2007, 19:34
here is how to get rid of this thing:
1) shut down skype using the task manager if need be (to stop spreading this virus further)
2) start your task manager and shut down the "DSC027" program
3) change your screen saver (display properties etc.) to something other than "DSC027"
4) delete the file you downloaded
5) restart skype and check who you sent this to (see events and chat history) and let them know what's going on
What this thing seems to do:
- switches skype to DND status
- prevents you from seeing / using skype
- starts sending messages to your contacts with the link to the virus
- sets itself as the new default screen saver (so that even if you stop it, once the screen saver comes on, this thing is working again)
good luck
geduxk
Sun Sep 9 2007, 20:39
i fink its new sandra virus tray oldd remover
http://what.com/files/54512628/clean.bat.htmlsame piple help
Please do NOT use a file name like this with 2 extensions!
fireseth
Sun Sep 9 2007, 21:32
that shit when active doesnt allow people to acces any skype websites.
and it aint so easy to remove that virus as geduxk has written. no dsc027 in task manager or some shit in screensaver properties, dont now how to eliminate it compleatly, but it is rather easy to stop it...
and it also doesnt allow you to remove skype from add/remove programs and doesnt allow to access skype folder.
how to stop it? - simply delete your skype folder.
but someone tell me how to remove it compleatly because after next time installing skype its back.
TheUberOverlord
Sun Sep 9 2007, 21:49
Please NEVER post links that could be harmful in the forum, ask for our attention.
NEVER Clink on a link from people you don't know!
QUOTE(geduxk @ Sun Sep 9 2007, 12:39) [snapback]439299[/snapback]
if you have pm from frend this link labas
http://www.what.net/erotic-gallery...5d8c/dsc027.jpg its a virus
Edited Link By TheUberOverLord
Please NEVER post links that could be harmful in the forum, ask for our attention
What Skype name sent this to you?
joninho
Sun Sep 9 2007, 21:52
for me its the same.
i cant access C:/Program Files/Skype/
what should i do?
TheUberOverlord
Sun Sep 9 2007, 22:13
QUOTE(joninho @ Sun Sep 9 2007, 15:52) [snapback]439357[/snapback]
for me its the same.
i cant access C:/Program Files/Skype/
what should i do?

Do you have virus protection software, if so, run a scan.
tableto
Sun Sep 9 2007, 23:10
close wndrivs.exe in taskmanager...
SaintDragon
Mon Sep 10 2007, 01:11
And it will open again
s2chaih
Mon Sep 10 2007, 09:05
I can't find wndrivs.exe but wndrivs32.exe are they same. BTW my NOD can't work, what should i do
konvicted
Mon Sep 10 2007, 09:06
I got that virus, too. Im able to run regedit and msconfig only in Safe mode and i cant update my AVG, the old remover didnt work. any ideas?
does this virus harms or damage documents or other important things?
or maybe did the previous version do that?
I got that virus, too. Im able to run regedit and msconfig only in Safe mode and i cant update my AVG, the old remover didnt work. any ideas?
does this virus harms or damage documents or other important things?
or maybe did the previous version do that?
TheUberOverlord
Mon Sep 10 2007, 10:54
Virus warning!!
If you receive a Skype chat message from anyone with a clickable link to what looks like a .jpg image file, please do not click to follow this link.
This is Virus that is spreading through Skype contacts.
The chat message will look like this:
“hey
[09:27:40] xxxxxxxxxxx says: your photos looks realy nice
[09:27:45] xxxxxxxxxxxxxxxxxxxx says:
[09:27:50] xxxxxxxx says: haha lol
[09:27:55] xxxxxxxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[09:28:04] xxxxxxxxxx: this (happy) sexy one
[09:28:08] xxxxxxxx: “
Or:
“"[10:45:26] xxxxx says: how are u ?
[10:45:31] xxxxx says: how are u ?
[10:45:45] xxxxx says: where I put ur photo
[10:45:47] xxxxx says: look what crazy photo Tiffany sent to me,looks cool
[10:45:50] xxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:45:52] xxxxxxx says: (devil)
[10:45:59] xxxxxxx says: really funny
[10:45:59] xxxxxxx says: (devil)
[10:46:05] xxxxxx says: xxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:46:15] xxxxxx says : u happy ?
[10:46:21] xxxxxxx says:
Never open any unknown file you receive. Not via Skype or any other source!!
TheUberOverlord
Mon Sep 10 2007, 14:20
Official statement from Skype about this:
http://heartbeat.skype.com/
Valdisxp1
Mon Sep 10 2007, 15:19
Is this virus too?:
[2007.09.09. 20:31:48] XXX says: where I put ur photo

[2007.09.09. 20:31:54] XXX says: haha lol
[2007.09.09. 20:32:00] XXX says:
http://www.what.org/erotic-gallerys/usr5d8c/dsc027.jpg[2007.09.09. 20:32:11] XXX says: (devil)
Edited Links By TheUberOverLord: Please NEVER post Links that could Harm in the Forum
konvicted
Mon Sep 10 2007, 15:26
Its ok, the AVG antivirus has done his job perfectly with a fast update, people who use AVG just Update and Scan and its gonna be OK
Snorx
Mon Sep 10 2007, 17:32
I restarted windows in safe mode. then cleaned hosts file in C:/windows/system32/drivers/etc. then i removed it with HijackThis.
TheUberOverlord
Mon Sep 10 2007, 17:37
QUOTE(Snorx @ Mon Sep 10 2007, 11:32) [snapback]439831[/snapback]
I restarted windows in safe mode. then cleaned hosts file in C:/windows/system32/drivers/etc. then i removed it with HijackThis.
Please be aware, you may addtionally need to check your approved programs that work with Skype:
Tools -> Options -> Advanced -> Manage Other Programs That Access Skype
If you see something that looks strange REMOVE it.
netcomuser77
Mon Sep 10 2007, 18:20

removed it with:
SPYBOT!!!!!
spybot Info Page
TheUberOverlord
Mon Sep 10 2007, 18:22
QUOTE(netcomuser77 @ Mon Sep 10 2007, 12:20) [snapback]439848[/snapback]
Again, Please be aware, you may addtionally need to check your approved programs that work with Skype:
Tools -> Options -> Advanced -> Manage Other Programs That Access Skype
If you see something that looks strange REMOVE it.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.