<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Hello System Admin &#124; Where system admins share technical article and tips &#124; Create free Blog &#124; Updates on domains, web hosting, servers and more &#187; skype virus attack</title>
	<atom:link href="http://hellosystemadmin.com/blog/tag/skype-virus-attack/feed/" rel="self" type="application/rss+xml" />
	<link>http://hellosystemadmin.com</link>
	<description></description>
	<lastBuildDate>Thu, 25 Aug 2011 04:48:11 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>skype automatically sends messages to all contacts</title>
		<link>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/</link>
		<comments>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/#comments</comments>
		<pubDate>Wed, 28 Apr 2010 11:18:57 +0000</pubDate>
		<dc:creator>Aneesh</dc:creator>
				<category><![CDATA[Cracking]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[skype virus attack]]></category>
		<category><![CDATA[Web Server Security]]></category>

		<guid isPermaLink="false">http://hellosystemadmin.com/?p=436</guid>
		<description><![CDATA[



Recently we have faced a Skye virus attack on a LAN. One of the users received a message
Do you think this is the definition of SEXY? I do.
http://www.xxxxxxxxxx.com/uploads/94603/NewPicture004.JPG.zip
Now the same message was started to send from this machine to all his skype contacts. Also sent email through email client.  In a couple of minutes all [...]]]></description>
			<content:encoded><![CDATA[<p><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></p>
<p>Recently we have faced a Skye virus attack on a LAN. One of the users received a message</p>
<blockquote><p><span style="color: #008000">Do you think this is the definition of SEXY? I do.<br />
http://www.xxxxxxxxxx.com/uploads/94603/NewPicture004.JPG.zip</span></p></blockquote>
<p>Now the same message was started to send from this machine to all his skype contacts. Also sent email through email client.  In a couple of minutes all systems were infected.  We have done the following steps to fix it</p>
<p><span style="text-decoration: underline"><strong>1. Cleaned the hosts file</strong></span><br />
We have noticed that the hosts file  located in c:\windows\sysetm32\drivers\etc\ was edited by the virus and it added many lines to the file at the very bottom.  We  scrolled down to the end and removed all unwanted entries.  Remember  this file is read only and you need to change the file attribute to save it.</p>
<p><span style="text-decoration: underline"><strong>2. Cleaned the System using <a href="http://download.bleepingcomputer.com/sUBs/ComboFix.exe">ComboFix</a></strong></span></p>
<p><a href="http://download.bleepingcomputer.com/sUBs/ComboFix.exe">Download </a>this and run the file.  Follow the instructions and complete the steps. In some cases you need to do with something on the Network Card. Go to Device manager and you will find two copies of the same network card. One with an Yellow color and other is normal. Now remove the Normal card and click on Scan for hardware changes and your card will be automatically installed. Note that you may also to set the IP address if you are using static IP address</p>
<p><span style="text-decoration: underline">3.  complete System scan using a good Anti Virus</span></p>
<p>Use any good anti virus program to do a full system scan. I recommend Avast Antivirus and do a boot time scan with that</p>
<p><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script><script type="text/javascript"><!--
google_ad_client = "pub-2585810307670535";
/* 468x60, created 11/28/09 */
google_ad_slot = "9594852426";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script></p>
<div id="st0000000001" class="st-taf"><script src="http://taf.socialtwist.com:80/taf/js/shoppr.core.js?id=0000000001"></script><img style="border:0;margin:0;padding:0;" src="http://tellafriend.socialtwist.com:80/wizard/images/tafbutton_blue16.png" onmouseout="hideHoverMap(this)" onmouseover="showHoverMap(this, '0000000001', 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fskype-automatically-sends-messages-to-all-contacts-skype-virus%2F', 'skype+automatically+sends+messages+to+all+contacts')" onclick="cw(this, {id:'0000000001',link: 'http%3A%2F%2Fhellosystemadmin.com%2Fblog%2Fskype-automatically-sends-messages-to-all-contacts-skype-virus%2F', title: '+skype+automatically+sends+messages+to+all+contacts+' })"/></div>]]></content:encoded>
			<wfw:commentRss>http://hellosystemadmin.com/blog/skype-automatically-sends-messages-to-all-contacts-skype-virus/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

