lol is this your new profile pic? Skype infection

1 Star2 Stars3 Stars4 Stars5 Stars (17 votes, average: 5.00 out of 5)
loadingLoading...

The hackers invented a new way to spread computer infections. This time they have involved Skype for distributing viruses.

Usually the Skype user receives the message “lol is this your new profile pic? http://goo.gl/CM4y5 from a person in the friends` list of Skype.

“hey, is this your skype profile pic”?
“hey, is this your skype profile pic”?

The link refers to goo.gl and is actually Google’s URL Shortener service. You’ll land on Hotfile.com, which is a legitimate file sharing website. ( Note! It’s not the first time Hotfile has been used to spread malware.)

image 2
image 2
Links refers to Hotfile and will immediately download a ZIP file.

Clicking the link will download a zipfile, and running the executable will lead to the infection of the PC.

When executing this file, another file (a random 6 character EXE) will be dropped to the %appdata% folder of the currently logged on user:

The file extracted from the ZIP archive – skype_xxxxxxxx_image.exe looks for the following processes:

  • msnmsgr.exe
  • msmsgs.exe
  • skype.exe

It will then automatically send a message, based on the OS language:

  • tas ir jusu jauna profila bildes?
  • seo do grianghraf prl nua?
  • ont uusi profiilikuva?
  • nai aft a fotografa profl sas?
  • sa kvo profili lusankary aquesta
  • s la teva nova foto de perfil?
  • hey ito sa iyong larawan sa profile?
  • hey lanh tieu cua ban?
  • hey ini foto profil?
  • hei zhni de gn zilio zhopin ma?
  • ni phaph porfil khxng khun?
  • hej er det din nye profil billede?
  • hej je to vasa nova slika profila?
  • hej je to tvuj nov obr zek profilu?
  • hei er dette din nye profil bilde?
  • hey la tua immagine del profilo nuovo?
  • hej to jest twj nowy obraz profil?
  • hej jeli ovo vasa nova profil skila?
  • hey bu yeni profil pic?
  • hej detta ar din nya profilbild?
  • tung, cka paske lyp ti nket fotografi?
  • moin , kaum zu glauben was fur schone fotos von dir auf deinem profil
  • hey is dit je nieuwe profielfoto?
  • ez az j profil ksta tu foto de perfil nuevo?
  • hey essa sua foto de perfil? rsrsrsrsrsrsrs
  • hey c’est votre nouvelle photo de profil?
  • hoi schoni fotis hesch du uf dim profil ppe n
  • lol is this your new profile pic?
  • To stop this mess you are recommended to perform the next steps: open skype ->go to tools-> options ->advanced ->allow other programs access to skype. Now when you click that there should be 3 programs remove them all from the list. Not less important this you need to do is to download the reputable anti-virus, like GridinSoft Trojan Killer and launch the full scan. Make sure to update virus database before using it.

Leave a Comment

*