The Skype chat client is the latest Windows application to be targeted by hackers. The computer virus, called “w32/Ramex.A”, takes advantage of Skype to spread itself. An infected computer will use the Skype client to send messages to friends with a link that, if clicked, will infect the friend’s computer. The link looks to be a link to a JPEG image but, if clicked, points to a SCR file. If that file is run, the computer becomes infected.
“The chat message, of which there are several versions, is cleverly written and may appear to be a legitimate chat message, which may fool some users into clicking on the link,” said Arak in an alert on the Skype site.
Also, according to Skype, F-Secure, Kaspersky Lab and Symantec have already updated their antivirus products to detect and remove the worm. Or you can go the more technical route as dictated by Skype:
- Restart the PC in safe mode
- Run regedit
- Go to HKLM/software/microsoft/windows/currentversion/runonce find entry with mshtmldat32.exe. Delete this entry.
- Go to Windows\System32 directory and delete following files: wndrivs32.exe, mshtmldat32.exe, winlgcvers.exe, sdrivew32.exe
- Go to windows/system32/drivers/etc
- Find file hosts
- Open it with notepad, ctrl+a and delete all entries (this will resume your antivirus updates), save, close.
- Restart the PC.
Better yet, just don’t be fooled. Don’t click on any image links sent via Skype.

David Risley is the founder of PCMech.com. He is the brains, the thinker, the writer, the nerd.