Skype Community > SKYPE VIRUS FIX HERE

Skype Community > English > General discussion > Security, Privacy, Trust and Safety

Chris from California

Mon Sep 10 2007, 12:52

Hello, Im sure many of you have experianced the nasty little virus that is going around. Thanks to myself and a freind of mine we where able to track the websites down that where sending the virus. ( We are not listing the sites for obvious reasons ) A report has been made and they should be shut down within 15 days. Now I know that seems like a long time, but thats the best we could do.

Below is a link to a fix, as of right now its the only one on the net. Please make sure to thank David D. AKA " The Internet Police" should you see him around on skypecast. He is the creator of the fix and, it took some hard work for him to put this EXE file together. I just did the BETA testing. Please make sure to spread the link around so that we can nip this virus in the butt.

- Chris From California

PS: Dont feel bad if you accpeted the file, the virus makes it look like its coming from a freind. It happens. Skype cant stop it because it thinks its just a JPEG file. It actully runs itself as a screensaver install after it contacts its home website, and overuns Explorer. Among many other system files. Good Luck and happy skypeing.

CLICK THIS LINK TO FIX: http://www.cryptic.co.uk/sv.exe

Install the program
Run the icon on the desktop
Your Clean!

This virus does not affect Vista. The files may install in Vista however it was made to attach to Windows XP system files, which are named diffrently in vista. Long Story short anyway.

EDIT: PLEASE NOTE THAT THE WEBSITE HAS BEEN UPDATED AND THE BUG AS BEEN FIXED YOU MAY NOW USE IT TO REMOVE THE VIRUS. THE SOFTWARE HAS BEEN TESTED AND WORKS WITHOUT THE PERVIOUS ERROR SORRY FOR THE INCONVENIENCE.

Due to High Bandwidth usage, we have moved the file to a new location

Please Visit http://www.cryptic.co.uk/sv.exe

To help keep your systems secure please visit: www.cryptic.co.uk

Sincerly

- "Chris From California" and "The Internet Police"

Deception Valley

Mon Sep 10 2007, 13:56

HOW CAN WE TRUST THIS> IS it not just another VIRUS I am going to download?

TheUberOverlord

Mon Sep 10 2007, 13:58

QUOTE(Chris from California @ Mon Sep 10 2007, 06:52) [snapback]439671[/snapback]

Hello, Im sure many of you have experianced the nast little virus that is going around. Thanks to myself and a freind of mine we where able to track the websites down that where sending the virus. A report has been made and they should be shut down within 15 days. Now I know that seems like a long time, but thats the best we could do.

Below is a link to a fix, right now its the only one on the net. Please make sure to thank David D. AKA " The Internet Police" should you see him around on skypecast. It took some work for him to put this EXE file togeather. Please make sure to spread the link around so that we can nip this virus in the but.

- Chris From California

PS: Dont feel bad if you accpeted the file, the virus makes it look like its coming from a freind. It happens. Skype cant stop it because it thinks its just a JPEG file. It actully runs itself as a screensaver install after it contacts it home website, and overuns Explor. Among many other system files. Good Luck and happy skypeing.
CLICK THIS LINK TO FIX: http://www.gui2.com/

Click the link on that page.
Install the program
Run the icon on the desktop
Your Clean!

This virus does not affect Vista. The files may install in Vista however it was made to attach to Windows XP system files, which are named diffrently in vista. Long Story short anyway.

Chris, please be careful when telling people this is a FIX. There is NO official proof this is the case. Thanks.

NevT

Mon Sep 10 2007, 14:15

Have you checked out the Skype Offical response to this Here
It also has a link detailing the virus and suggested fix.
Regards
Nev

TheUberOverlord

Mon Sep 10 2007, 14:17

Official statement from Skype about this: http://heartbeat.skype.com/

polymerpat

Mon Sep 10 2007, 15:22

QUOTE(Chris from California @ Mon Sep 10 2007, 12:52) [snapback]439671[/snapback]

CLICK THIS LINK TO FIX: http://www.gui2.com/

Click the link on that page.
Install the program
Run the icon on the desktop
Your Clean!

Chris thanks for posting this link, however most ppl in general would (and should be) very cautious about using an .exe which they found posted in a forum. So posting or linking to the manual removal instructions at the same time would be helpful in the future!

Chris from California

Mon Sep 10 2007, 22:13

QUOTE(polymerpat @ Mon Sep 10 2007, 07:22) [snapback]439767[/snapback]

Yes Im finding this the hard way, people are starting to say that I created the virus now. lol What some people think up. Well I wish I knew how to take it out the long way. As for Uberoverlord, relax the there is nothing wrong with the EXE file. Good Luck to all

Chris

Dreamskape

Mon Sep 10 2007, 23:38

My Norton utility has identified this as the W32.Pykaspa.D virus. You can go to the symantec website to see how to get rid of it.

TheUberOverlord

Mon Sep 10 2007, 23:47

QUOTE(Dreamskape @ Mon Sep 10 2007, 17:38) [snapback]439959[/snapback]

My Norton utility has identified this as the W32.Pykaspa.D virus. You can go to the symantec website to see how to get rid of it.

Actually, it's called “w32/Ramex.A”. More Here: http://heartbeat.skype.com/?_a=announcements

Dreamskape

Mon Sep 10 2007, 23:50

I'm just saying what my Norton utility said when I scanned the file. It said it was blocked because it contained the W32.Pykaspa.D virus.

The msgs that I have received have all been slightly different, so it could be possible that there are a couple different viruses going around.

Chris from California

Tue Sep 11 2007, 01:19

QUOTE(Dreamskape @ Mon Sep 10 2007, 15:50) [snapback]439964[/snapback]

Dont worry your correct, diffrent Virus companys are useing slightly diffrent names. Overlord if you check your heartbeat page you will see that. HINT: Check the update at the top. Or google it.

polymerpat

Tue Sep 11 2007, 01:31

QUOTE(Dreamskape @ Mon Sep 10 2007, 23:38) [snapback]439959[/snapback]

My Norton utility has identified this as the W32.Pykaspa.D virus. You can go to the symantec website to see how to get rid of it.

Are you talking about the .exe removal file, or the original virus?

Chris from California

Tue Sep 11 2007, 01:41

EDIT: PLEASE NOTE THAT THE WEBSITE HAS BEEN UPDATED AND THE BUG AS BEEN FIXED YOU MAY NOW USE IT TO REMOVE THE VIRUS. THE SOFTWARE HAS BEEN TESTED AND WORKS WITHOUT THE PERVIOUS ERROR SORRY FOR THE INCONVENIENCE.

Please Visit: http://www.cryptic.co.uk/sv.exe

Adax

Tue Sep 11 2007, 10:42

Why is the .exe with the fix 10 MB? Shouldn't it be just a small file?

Chris from California

Tue Sep 11 2007, 18:29

No not nessecerly. Here is the deal. We have had a few people that dont want to download the EXE file for whatever reason.

This is what we are telling everyone, if you dont have the virus, GREAT! However if you do have the virus, what do you have to lose? Do a google search on Cryptic. Do a search for Cybersight, these are just some of the programs that David Duke creates.

Many people have already downloaded the fix, and said it has worked great, if you have used the fix, and it worked for you, please be sure to comment here and let everyone know how it went. Thanks again and good luck!

Maaris

Wed Sep 12 2007, 09:15

Bandwidth Limit Exceeded for http://www.gui2.com/ any other place for this tool ?

polymerpat

Wed Sep 12 2007, 10:30

QUOTE(Maaris @ Wed Sep 12 2007, 09:15) [snapback]440443[/snapback]

Bandwidth Limit Exceeded for http://www.gui2.com/ any other place for this tool ?

Check this topic out for an alternate removal tool. As in the case of all tools posted on these forums, use at your own risk.

Good luck

Chris from California

Wed Sep 12 2007, 12:13

Due to High Bandwidth we have moved the Virus Fix to a new location.

To download the patch click here: http://www.cryptic.co.uk/sv.exe

For security you never thought possible visit : http://www.cryptic.co.uk

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.