Help - Search - Members - Calendar
Full Version: SKYPE new virus
Skype Community > English > General discussion > Skype in the news
geduxk
if you have pm from frend this link labas
http://www.what.net/erotic-gallery...5d8c/dsc027.jpg its a virus

Edited Link By TheUberOverLord

Please NEVER post links that could be harmful in the forum, ask for our attention
spud5
WARNING
The file in the above post is not a .jpg image, so do not be tempted to click.
EdjKa
QUOTE(spud5 @ Sun Sep 9 2007, 19:19) [snapback]439311[/snapback]

WARNING
The file in the above post is not a .jpg image, so do not be tempted to click.


All , look here LINK REMOVED, it's my community forum , some contacts send me link , like i posted there , this is also virus , don't even try to open this link from your skype contacts

Edited to remove link because had link to another bad link TheUberOverLord
snoethlichs
here is how to get rid of this thing:

1) shut down skype using the task manager if need be (to stop spreading this virus further)

2) start your task manager and shut down the "DSC027" program

3) change your screen saver (display properties etc.) to something other than "DSC027"

4) delete the file you downloaded

5) restart skype and check who you sent this to (see events and chat history) and let them know what's going on

What this thing seems to do:

- switches skype to DND status
- prevents you from seeing / using skype
- starts sending messages to your contacts with the link to the virus
- sets itself as the new default screen saver (so that even if you stop it, once the screen saver comes on, this thing is working again)

good luck
geduxk
i fink its new sandra virus tray oldd remover http://what.com/files/54512628/clean.bat.html
same piple help

Please do NOT use a file name like this with 2 extensions!
fireseth
that shit when active doesnt allow people to acces any skype websites.

and it aint so easy to remove that virus as geduxk has written. no dsc027 in task manager or some shit in screensaver properties, dont now how to eliminate it compleatly, but it is rather easy to stop it...

and it also doesnt allow you to remove skype from add/remove programs and doesnt allow to access skype folder.
how to stop it? - simply delete your skype folder.

but someone tell me how to remove it compleatly because after next time installing skype its back.
TheUberOverlord


Please NEVER post links that could be harmful in the forum, ask for our attention.

NEVER Clink on a link from people you don't know!

QUOTE(geduxk @ Sun Sep 9 2007, 12:39) [snapback]439299[/snapback]

if you have pm from frend this link labas
http://www.what.net/erotic-gallery...5d8c/dsc027.jpg its a virus

Edited Link By TheUberOverLord

Please NEVER post links that could be harmful in the forum, ask for our attention


What Skype name sent this to you?
joninho
for me its the same.

i cant access C:/Program Files/Skype/

what should i do? sadsmile.png
TheUberOverlord
QUOTE(joninho @ Sun Sep 9 2007, 15:52) [snapback]439357[/snapback]

for me its the same.

i cant access C:/Program Files/Skype/

what should i do? sadsmile.png


Do you have virus protection software, if so, run a scan.
tableto
close wndrivs.exe in taskmanager... wink.png
SaintDragon
And it will open again wink.png
s2chaih
I can't find wndrivs.exe but wndrivs32.exe are they same. BTW my NOD can't work, what should i do
konvicted
I got that virus, too. Im able to run regedit and msconfig only in Safe mode and i cant update my AVG, the old remover didnt work. any ideas?

does this virus harms or damage documents or other important things?
or maybe did the previous version do that?

I got that virus, too. Im able to run regedit and msconfig only in Safe mode and i cant update my AVG, the old remover didnt work. any ideas?

does this virus harms or damage documents or other important things?
or maybe did the previous version do that?
TheUberOverlord
Virus warning!!

If you receive a Skype chat message from anyone with a clickable link to what looks like a .jpg image file, please do not click to follow this link.

This is Virus that is spreading through Skype contacts.

The chat message will look like this:

“hey
[09:27:40] xxxxxxxxxxx says: your photos looks realy nice
[09:27:45] xxxxxxxxxxxxxxxxxxxx says:
[09:27:50] xxxxxxxx says: haha lol
[09:27:55] xxxxxxxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[09:28:04] xxxxxxxxxx: this (happy) sexy one
[09:28:08] xxxxxxxx: “

Or:

“"[10:45:26] xxxxx says: how are u ?
[10:45:31] xxxxx says: how are u ?
[10:45:45] xxxxx says: where I put ur photo
[10:45:47] xxxxx says: look what crazy photo Tiffany sent to me,looks cool
[10:45:50] xxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:45:52] xxxxxxx says: (devil)
[10:45:59] xxxxxxx says: really funny
[10:45:59] xxxxxxx says: (devil)
[10:46:05] xxxxxx says: xxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:46:15] xxxxxx says : u happy ?
[10:46:21] xxxxxxx says:

Never open any unknown file you receive. Not via Skype or any other source!!
TheUberOverlord
Official statement from Skype about this: http://heartbeat.skype.com/
Valdisxp1
Is this virus too?:

[2007.09.09. 20:31:48] XXX says: where I put ur photo bigsmile.png
[2007.09.09. 20:31:54] XXX says: haha lol
[2007.09.09. 20:32:00] XXX says: http://www.what.org/erotic-gallerys/usr5d8c/dsc027.jpg
[2007.09.09. 20:32:11] XXX says: (devil)

Edited Links By TheUberOverLord: Please NEVER post Links that could Harm in the Forum
konvicted
Its ok, the AVG antivirus has done his job perfectly with a fast update, people who use AVG just Update and Scan and its gonna be OK
Snorx
I restarted windows in safe mode. then cleaned hosts file in C:/windows/system32/drivers/etc. then i removed it with HijackThis.
TheUberOverlord
QUOTE(Snorx @ Mon Sep 10 2007, 11:32) [snapback]439831[/snapback]

I restarted windows in safe mode. then cleaned hosts file in C:/windows/system32/drivers/etc. then i removed it with HijackThis.


Please be aware, you may addtionally need to check your approved programs that work with Skype:

Tools -> Options -> Advanced -> Manage Other Programs That Access Skype

If you see something that looks strange REMOVE it.

netcomuser77
devil.png removed it with: SPYBOT!!!!!
spybot Info Page hi.png
TheUberOverlord
QUOTE(netcomuser77 @ Mon Sep 10 2007, 12:20) [snapback]439848[/snapback]


Again, Please be aware, you may addtionally need to check your approved programs that work with Skype:

Tools -> Options -> Advanced -> Manage Other Programs That Access Skype

If you see something that looks strange REMOVE it.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.