New Virus Attacks Skype Users (Removal Guide Included)

New Skype virus arrived yesterday, September 9, 2007, and it was capable of infecting large number of computers. It uses the same tactics as other Skype related malware: it sends random message to a victim and offers to view an erotic screensaver/picture. If someone is curious enough to click the link, he or she gets an infected file which starts to mess a computer and sends itself further to everyone on Skype contact list.

People tend to view the suggested photo, because the message looks like a friend have just sent it. And that’s how the virus keeps spreading around the world. Avoid clicking suspicious links even when they seem to be recommended by your friends.

According to reports on Skype forum the link usually looks like this:

[Random website].net/erotic-gallerys/usr5d8c/[random filename].jpg

And the messages that come along can be similar to these:

……….
Contact name : I used photoshop and edited it
Contact name : [Random website].net/erotic-gallerys/usr5d8c/[random filename].jpg
Contact name : oh sry not for u
……….
Contact name : look what crazy photo Tiffany sent to me,looks cool
Contact name : 😀
Contact name : really funny
Contact name : [Random website].net/erotic-gallerys/usr5d8c/[random filename].jpg
Contact name : oh sry not for u
……….

If you have already clicked the link and your computer is infected, here’s a simple removal:


1)
Run your computer in a Safe Mode (feel free to use safe mode tutorial).


2)
Open Windows Start Meniu and click o the “Run…” option. Type in “regedit” and click the “Ok” button.


3)
Once you open the Registry Editor, search for “HKLM/software/microsoft/windows/currentversion/runonce” entry and find “mshtmldat32.exe”. This is what you need to remove.


4)
Open C://Windows/System32 directory and delete the following files: mshtmldat32.exe, sdrivew32.exe, wndrivs32.exe, winlgcvers.exe.


5)
Open ://Windows/System32/drivers/ directory and locate your HOSTS file (you may need Blocking Spyware Using the HOSTS File tutorial). Open the file with Notepad and delete all entries on it except the “127.0.0.1 localhost”. Remember to save the changes you made.

6) Restart your computer in a Normal Mode.

This Skype virus is a nasty one, because it drops several other parasites (usually keyloggers) on a victim’s computer. That’s why you should run antivirus and anti spyware to be sure that your computer is clean.


  • I have to give thanks to you for this blog post, it is extremely informative and also beneficial. I’ve had many negative ordeals with spyware and adware, and it is very discouraging to deal with. One time I needed to re-install Windows xp due to some basic spyware that I never took proper care of. Another moment My spouse and i experienced some words randomly announcing stuff to my family regarding some product I earned, it had become very annoying. I am going to book mark your web blog and come again quite often. Thank you again

Files
Software
Compare
Like us on Facebook