07 March 2012

Remove Skype haha foto virus / worm

Hello,

Remember my post about Skype haha foto http://goo.gl/...?Facebook.com-IMG....JPG

After several days, I have found on the internet how to remove this worm.  Read below:

Try locate in processlist file called mdm.exe, and kill the process, Then download any startup program management utilities - for example Nirsoft Startup.cpl and look for "Windows Firevall engine" that references the "c:/windows/mdm.exe". Delete or disable those in startup and delete the file itself under c:/windows/mdm.exe

12 February 2012

Skype haha foto http://goo.gl/...?Facebook.com-IMG....JPG

Many of my friends have sent me some "photos". Something like: haha foto http://goo.gl/...?Facebook.com-IMG....JPG

All these messages were sent through skype groups.
This of course is something like virus.

Because when you click on that link it is being opened in browser and there is no photo in it, however it looks like it is installing something on your computer and from now and on you are also sending group messages through skype :) with the message: haha foto http://goo.gl/...?Facebook.com-IMG....JPG

I very much believe that it's purpose is not only to send that link, but it should also do something in the background, I still don't know what, maybe some key logging of your credentials to email/skype/facebook and others.

Need more? Leave comments and subscribe to my blog.

.