The file SKYPE1.EXE is a computer worm.
The worm SKYPE1.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the SKYPE1.EXE problem as soon as possible!
Delete the file SKYPE1.EXE from all infected computers in your network.
Set up your network firewall against SKYPE1.EXE intervention.
Malware Analysis of SKYPE1.EXE
Full path on a computer: %SysDir%\skype1\skype1.exe
Detected by UnHackMe:
SKYPE1.EXE
Default location: %SysDir%\skype1\skype1.exe
Removal Results: Success
Number of reboot: 1
SKYPE1.EXE is known as:
Worm.Luder.bgvf, Packed.MoleBox, BackDoor.Bifrost.20804, Mal.VB-CMXA, VirTool.VBInject.OT, Trojan.VBKrypt, a variant of Win32.Packed.Molebox.C, Worm.Rebhip, BackDoor.Bifrose.OJQ
SKYPE1.EXE hash:
- MD5: 24508fcc02f91a2da1d70b779d35cdd5
How to quickly detect SKYPE1.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836}\stubpath: “%SysDir%\skype1\skype1.exe s”
Folders:- %SysDir%\skype1
Files:- %Temp%\~DF60E6.tmp
- %Temp%\~DFB9C9.tmp
- %Program Files%\1.exe
- %SysDir%\1.exe
- %SysDir%\skype1\logg.dat
- %SysDir%\skype1\skype1.exe
- %WinDir%\Temp\1.exe
- %WinDir%\1.exe
- %WinDir%\2.exe
- C:\1.exe
- C:\autorun.inf