Skype worm bypasses security software

Skype has admitted that a new virus called “w32/Ramex.A” poses a threat to Windows PC users.

The virus starts as a chat message to Skype users but once the harmless-looking .jpg image is clicked, users are asked to save a file which will infect their system.

The virus is cleverly disguised with chat messages like ‘how are u ? :)’, ‘look what crazy photo Tiffany sent to me, looks cool’ and ‘your photos looks really nice’ among others. The worm arrives just a month after the Skype service suffered a major crash.

“When a Skype user receives the chat message - either from their Skype contacts or users not on their contact list - it includes an internet link,” said Skype spokesman Villu Arak. “Instead of a .jpg image that it seems to point to, the link actually leads to a virus file. By clicking on the link, the Windows Run/Save dialog box will pop up, asking for permission to save or run a .scr file. This is the virus file and should not be downloaded or run.”

He added: “Our security team is actively engaging with domain owners to shut down malicious websites that are being used to spread the virus.”

Anti-virus company FSecure has named the virus W32/Skipi.A, while Symantec has named it W32.Pykspa.D. The file, when activated, displays a bubble image (pictured) and can disable certain security software functions. Users can find instructions on how to remove the virus here.