New virus detected.

I have got 3 diferent types of PM :

[19:57:45] [ ] sako: labas
[19:57:48] [ ] sako: labas
[19:58:00] [ ] sako: kas cia tavim taip isderge ? =]]
[19:58:04] [ ] sako:
[19:58:05] [ ] sako: kas cia tavim taip isderge ? =]]
[19:58:08] [ ] sako: http://www.what.net/erotic-gallery...5d8c/dsc027.jpg
[19:58:11] [ ] sako: geras ane ?
[19:58:15] [ ] sako: http://www.what.org/erotic-gallerys/usr5d8c/dsc027.jpg
[19:58:20] [ ] sako: matai
[19:58:24] [ ] sako:
[19:58:24] [ ] sako:


[20:18:03] [ ] sako: hey
[20:18:16] [ ] sako: where I put ur photo
[20:18:18] [ ] sako: haha lol
[20:18:22] [ ] sako: http://www.what.net/erotic-gallery...5d8c/dsc027.jpg
[20:18:30] [ ] sako: oops sorry please don't look there :S

[20:47:07] [ ] sako: hey
[20:48:04] [ ] sako: how are u ?
[20:48:05] [ ] sako: oh sry not for u
[20:48:13] [ ] sako: hey
[20:48:16] [ ] sako: (rofl)
[20:48:30] [ ] sako: look what crazy photo Tiffany sent to me,looks cool
[20:48:33] [ ] sako: where I put ur photo
[20:48:36] [ ] sako:



Just DON'T go to this link : http://www.what.net/erotic-gallery...5d8c/dsc027.jpg .

Edited Link By TheUberOverLord

Please NEVER post links that could be harmful in the forum, ask for our attention

Yeah , we are talking about this here - http://forum.skype.com/index.php?showtopic=96570

Please NEVER post links that could be harmful in the forum, ask for our attention.

NEVER Clink on a link from people you don't know!



Is this the only Skype Name you haev received this from?

No, I just got it from ~10 diferent people.

P.S. sr for that link.

ok, please PM me the 10 Skype names and yours as well.

HEI

No any processes in my PC with the name you put above this message: DCS027

I suppose that problem is files(or process) in task manager with name:

wndrivs.exe

All antivirus systems intlall on my PC do not start!!!

Maybe somebody have found anythyng against this shit?

how are u ?
[9/9/2007 10:46:22 PM] ingus says: hey
[9/9/2007 10:46:35 PM] ingus says: I used photoshop and edited it
[9/9/2007 10:46:37 PM] ingus says: look
[9/9/2007 10:46:40 PM] ingus says:
[9/9/2007 10:46:42 PM] ingus says:
[9/9/2007 10:46:44 PM] ingus says: http://www.wh.......sr5d8c/dsc027.jpg
[9/9/2007 10:46:47 PM] ingus says: http://www.what.o...........allerys/usr5d8c/dsc027.jpg
[9/9/2007 10:46:54 PM] ingus says: oh sry not for u
[9/9/2007 10:46:56 PM] ingus says: oh sry not for u
[9/9/2007 10:46:57 PM] ingus says:
[9/9/2007 10:47:00 PM] ingus says:

Edited Links. This user has been restricted for posting the actual links in the forum, this helps nobody and hurts many.

ANYONE! who posts links here that could cause problems, will be restricted, please ask for our help, there is NOT a need to post the actual links







какие новости?
[9/9/2007 9:55:39 PM] [Evil]*Ky3bMa says: слушаи
[9/9/2007 9:55:44 PM] [Evil]*Ky3bMa says: она горячая?
[9/9/2007 9:55:48 PM] [Evil]*Ky3bMa says: http://www.what.or.............s/usr5d8c/dsc027.jpg
[9/9/2007 9:57:18 PM] [Evil]*Ky3bMa says: там?
[9/9/2007 9:57:28 PM] [Evil]*Ky3bMa says: красивaяa ?
[9/9/2007 9:57:32 PM] [Evil]*Ky3bMa says: она горячая?
[9/9/2007 9:57:35 PM] [Evil]*Ky3bMa says: http://www.what.o.................rys/usr5d8c/dsc027.jpg
[9/9/2007 9:57:45 PM] [Evil]*Ky3bMa says: это мой частный подруsky
[9/9/2007 9:57:49 PM] [Evil]*Ky3bMa says: (devil)





how to remove this virus... pliiz help..
only what i know, is ctrl+alt+delete, process, the kill r_server.exe .. this like virus, but he starts again & again...

i find a way: after deleting all shit manualy (downloaded file, process, all files with dsc027) and if you stil cant access C:/Program Files/Skype/ folder, just run system restore. That worked for me.

I will restrict or BAN ANYONE who posts links in this form to these

is there any way to delete sent text to my contacs if they wasnt online and didnt receive it?

Uber, my dad also got the link to this file via a PM from a friend. Its like when people download this file, it gives someone access to that persons skype and then re-sends the file to everyone in their contacts. I received the link myself but did not download it, but my dad did, and now his computer is all messed up.

NO

Thanks, for letting me know, but it is important to note that people should NOT post the actual links in the forum, it helps nobody, and I will need to restrict people that do, because it can harm others if I do not do that.

In task manager processes close wndrivs.exe its helps.. after you close it you can use skype normaly .

I knew this that the problem with this file but after that like I closed that file it starts again and again in some seconds after closing.



Still don't know how to destroy it

Again, please PM me the Skype names that sent you this and your Skype name, you should be able to look at your Skype Chat History to get the names.

Also, if you have an Anti-Virus run a Scan.

When you see links even from a friend, that do NOT make sense, NEVER click on them.

I can not see Skype name who sent me that link coz my Skype now doesn't works.

my skype name is: grisha_venalainen

I have 2 antivirus systems on my PC but DO NOT WORK. I can not even start any of them

I am asking you, did you know this Skype Name, or was it someone NOT on your contact list?

I know who sent me that message..it was a girl from Latvia, she is from my contact list but I do not know her Skype name and can not see it because Skype doesn't starts

Maybe she's Skype name is cease fire or cease_fire do not know exactly but something like that

Ok, thanks

I can also confirm that the virus could be coming from Latvia or somewhere near. Received the links from bedronka_, defonicia and some others, they all are offline now.

I can't find wndrivs.exe but wndrivs32.exe are they same? BTW my NOD can't work, what should i do?

Virus warning!!

If you receive a Skype chat message from anyone with a clickable link to what looks like a .jpg image file, please do not click to follow this link.

This is Virus that is spreading through Skype contacts.

The chat message will look like this:

“hey
[09:27:40] xxxxxxxxxxx says: your photos looks realy nice
[09:27:45] xxxxxxxxxxxxxxxxxxxx says:
[09:27:50] xxxxxxxx says: haha lol
[09:27:55] xxxxxxxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[09:28:04] xxxxxxxxxx: this (happy) sexy one
[09:28:08] xxxxxxxx: “

Or:

“"[10:45:26] xxxxx says: how are u ?
[10:45:31] xxxxx says: how are u ?
[10:45:45] xxxxx says: where I put ur photo
[10:45:47] xxxxx says: look what crazy photo Tiffany sent to me,looks cool
[10:45:50] xxxxx says: xxxxxxxxxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:45:52] xxxxxxx says: (devil)
[10:45:59] xxxxxxx says: really funny
[10:45:59] xxxxxxx says: (devil)
[10:46:05] xxxxxx says: xxxxxxx/erotic-gallerys/usr5d8c/dsc027.jpg
[10:46:15] xxxxxx says : u happy ?
[10:46:21] xxxxxxx says:

Never open any unknown file you receive. Not via Skype or any other source!!

Official statement from Skype about this: http://heartbeat.skype.com/