New Skype Worm Confirmed

malware · Sep 12, 2007, 09:52 AM

Skype has learned that a computer virus called "w32/Ramex.A" is affecting users of Skype for Windows. Users whose computers are infected with this virus will send a chat message to other Skype users asking them to click on a web link that can infect the computer of the person who receives the message. The worm is also known as "WORM_SKIPI.A (Trend)," and "W32/Pykse.worm.b" (McAfee). When a Skype user receives chat message with an internet link - either from Skype contacts or users not on the contact list - and download the .scr file covered as .jpg picture, the worm will install itself to the system and create several startup keys in the registry. Currently, F-Secure, Kaspersky Lab and Symantec have already updated their antivirus products to detect and remove the worm. Expert users who know what they’re doing can also remove the worm manually, by following this guide.

Source: Skype

Glump Bliermp · Sep 12, 2007, 02:36 PM

My GF's cousin has this exact same virus except it affects his Mac version of AIM.

WarEagleAU · Sep 12, 2007, 04:00 PM

Wow, seems nothing is safe from Viruses these days.
I didnt see Avast on the list, I hope they update theirs soon.

Migons · Sep 12, 2007, 04:31 PM

Quote:

Originally Posted by WarEagleAU

Wow, seems nothing is safe from Viruses these days.

Luckily I'm not running Windows, even though Skype yes.

Wile E · Sep 13, 2007, 08:00 AM

Quote:

Originally Posted by Glump Bliermp

My GF's cousin has this exact same virus except it affects his Mac version of AIM.

Proof?

I think a virus that effects a Mac would be front page news on every tech site on the web.

Sep 12, 2007, 09:52 AM	#1
malware Eligible for custom title Join Date: Nov 2004 Location: Bulgaria Posts: 5,413 (1.74/day) Thanks: 78 Thanked 986 Times in 497 Posts System Specs	New Skype Worm Confirmed Skype has learned that a computer virus called "w32/Ramex.A" is affecting users of Skype for Windows. Users whose computers are infected with this virus will send a chat message to other Skype users asking them to click on a web link that can infect the computer of the person who receives the message. The worm is also known as "WORM_SKIPI.A (Trend)," and "W32/Pykse.worm.b" (McAfee). When a Skype user receives chat message with an internet link - either from Skype contacts or users not on the contact list - and download the .scr file covered as .jpg picture, the worm will install itself to the system and create several startup keys in the registry. Currently, F-Secure, Kaspersky Lab and Symantec have already updated their antivirus products to detect and remove the worm. Expert users who know what they’re doing can also remove the worm manually, by following this guide. Source: Skype

Processor:	Intel Core 2 Quad Q6600 G0 VID: 1.2125
Motherboard:	GIGABYTE GA-P35-DS3P rev.2.0
Cooling:	Thermalright Ultra-120 eXtreme + Noctua NF-S12 Fan
Memory:	4x1 GB PQI DDR2 PC2-6400
Video Card:	Colorful iGame Radeon HD 4890 1 GB GDDR5
Hard Disk:	2x 500 GB Seagate Barracuda 7200.11 32 MB RAID0
Optical Drive:	LITE-ON IT LH-20A1L 20x SATA DVD±RW LightScribe
CRT/LCD Model:	BenQ G2400W 24-inch WideScreen LCD
Case:	Cooler Master COSMOS RC-1000 (sold), Cooler Master HAF-932 (delivered)
Sound Card:	Creative X-Fi XtremeMusic + Logitech Z-5500 Digital THX
PSU:	Chieftec CFT-1000G-DF 1kW
Software:	Laptop: Lenovo 3000 N200 C2DT2310/3GB/120GB/GF7300/15.4"/Razer

Sep 12, 2007, 04:00 PM	#3
WarEagleAU Bird of Prey Join Date: Jul 2006 Location: Gurley, AL Posts: 9,994 (3.98/day) Thanks: 3,810 Thanked 557 Times in 521 Posts System Specs	Wow, seems nothing is safe from Viruses these days. I didnt see Avast on the list, I hope they update theirs soon. __________________ =-TheEagle-= http://www.heatware.com/eval.php?id=62454 “You crazy? Surfing any website without an antivirus is like freaking with a dirty woman without protection” -OzzmanFloyd120 - Edited for content and clarity

System Name:	Boddha Getta
Processor:	AMD FX 6100 @ 4.432Ghz @1.401V
Motherboard:	ASUS M5A99X EVO AMD 990X AMD SB950
Cooling:	Custom Water. EK 240MM Kit, Supreme HSF - Runs 35C
Memory:	2 x 4GB Corsair Vengeance White LP @ 1.35V
Video Card:	XFX Radeon HD 6870 900/1050 (no OC yet)
Hard Disk:	WD Caviar Black 1.0TB, WD Caviar Green 1.0TB, WD 160GB
Optical Drive:	Samung SH22SL 22X Lightscribe DVD+/-R/RW LG BDRE Reader/Burner Lite ON Max Burner for burning Xbox
CRT/LCD Model:	Asus VH222/S 22: (21.5" Viewable) 1920x1080p HDMI LCD Monitor
Case:	NZXT White Phantom
Sound Card:	Onboard Realtek 5.1
PSU:	NZXT Hale 90 Gold Cert 750W Modular PSU
Software:	Windows 7 Pro 64 bit.
Benchmarks:	5.9 Windows Index rating 3D06 - 17472

Processor:	Athlon 64 3500+ ClawHammer
Motherboard:	Asus A8V Deluxe Rev. 2.00
Cooling:	Zalman CNPS7700-Cu
Memory:	2x 512MB A-Data Vitesta DDR500
Video Card:	Club 3D GeForce 6200 128MB
Hard Disk:	Seagate 7200.7 160GB + 80GB SATA 8MB
Optical Drive:	BenQ DW1650
CRT/LCD Model:	Dell M770 17" CRT (!!!)
Case:	Antec Performance PlusView1000AMG
Sound Card:	Sound Blaster Live! 5.1
PSU:	Nexus NX-4090 400W
Software:	FreeBSD 6.2 w/ custom kernel

Sep 12, 2007, 02:36 PM	#2
Glump Bliermp Banned Join Date: Jul 2007 Posts: 74 (0.03/day) Thanks: 0 Thanked 0 Times in 0 Posts	My GF's cousin has this exact same virus except it affects his Mac version of AIM.

System Name:	The ClusterF**k
Processor:	980X @ 4212Mhz 24/7
Motherboard:	Gigabyte GA-EX58-UD5 BIOS F12
Cooling:	MCR-320, DDC-1 pump w/Bitspower res top (1/2" fittings), Koolance CPU-360
Memory:	3x2GB Mushkin Redlines 1600Mhz 6-8-6-24
Video Card:	Evga GTX 580
Hard Disk:	Seagate 7200.10 320GB x2 RAID0; 2 x Samsung F2 1.5TB; 1 x F1 1TB; 1 x F4 2TB
Optical Drive:	LG WH10LS30K 10X Blu-ray Burner
CRT/LCD Model:	HP LP2475w 24" 1920x1200 IPS
Case:	Technofront Bench Station
Sound Card:	Auzentech X-Fi Forte into Onkyo SR606 and Polk TSi200's + RM6750
PSU:	ENERMAX Galaxy EVO EGX1250EWT 1250W
Software:	Win7 Ultimate N x64

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)