SKYPE VIRUS (CEA3.exe file) - READ TO FIX

[Guest]

BE CAREFULL, NEW SKYPE CONTACTS JOINING DON'T KNOW THE PROBLEM, SPEAK TO THEM IMMEDIATLY, LET THEM BE AWARE!

 

USEFULL PROGRAM TO INSTALL AND RUN A SCAN OF YOUR PC AFTER GETTING INFECTED CAN BE FOUND HERE: http://www.malwarebytes.org/

 

 

IMPORTANT ADVICE: THE VIRUS CHANGE NAME EVERY NOW AND THEN, SO YOU MUST SEARCH FILE NAMED THIS WAY: D3D4.exe, A7F3.exe and similar

IMPORTANT ADVICE (2): THE VIRUS APPEAR ALSO WITH A FILE WITH SKYPE ICON, BUT NAMED RANDOMLY LIKE: dfgsdgfhg.exe (with skype icon)

 

^^ THOSE MUST BE REMOVED, if you can't delete them, close skype and try again.

If you still can't turn off your PC and retry.

 

 

 

Good afternoon guys (depending on your timezone)..

I joined Skype 1 hour ago, and saw a good amount of players complaining about a Skype VIRUS..

 

The virus was made in a way that if someone click a specific link (as quite all virus do these days), a file will be downloaded and saved inside your PC.

Everytime you join Skype, the virus will use Skype as a platform and launch the same link you clicked to all your contacts, trying to infect all of them.

 

What to do:

1. ABSOLUTELY DON'T CLICK LINKS THAT COME FROM RANDOM CONTACTS AND WITHOUT ANY REASONS
    
   
2. If you clicked them, you have 2 possibilities:
   

• Your antivirus gives an alarm and stop the file, so you are safe
  
• It happears a windows asking if you'd like to open or save a .zip file, say "NO" and go away from that link
  
• The file install automatically and immediatly in your PC, and you are infected
  

If the file is installed, then you need to do what is written below, without getting in panic:

1. Close Skype
    
   
2. In "Start"-->"Search" write "roaming" - you will enter a folder with all files used by your PC's applications
    
   
3. Search the file called XXXnumber.exe and delete it
    
   
4. Restart your PC and join Skype again
   

Hope I helped you to fix this problem, Barba ;)

 

P.S Don't go in panic, read carefully my guide or meet me on Skype.

Edited October 7, 2012 by Guest

[datie9 72]

Guys, BarbaFenner helped me with my computer, I accidently clicked downloaded the virus, from somebody else. So great thx to BarbaFenner.

To all my Dutch friends who also have problems now, I will translate it.

But first of all: The virus is called CEA3.exe and after you downloaded it, it will be stored in your roaming data, it also will have a continueing proces, which you can see in your task manager. When the virus gets activated, it will send a message with the download link to all of your skypecontacts, it can also ask you for permission to use skype as launch plaform. Whatever you click, yes or no.. it will launch. BE AWARED!

now the translation:

Het virus heet CEA3.exe en zorgt ervoor dat al je contacten een bericht krijgen, waarin ze het virus kunnen downloaden. Wat moet je doen om het virus weg te halen?

Wanneer je het virus hebt gedownload,moet je doen wat hieronder staat, zonder in paniek te raken.

1. Sluit skype af, helemaal
   
2. Druk op de start knop, en typ bij zoeken in: roaming. je komt nu in een map waar allemaal bestanden staan die je computer gebruikt bij programma's.
   
3. Zoek in de map roaming naar het bestand CEA3.exe, en alle andere bestanden die hierop lijken. VERWIJDER DEZE
   
4. Start je computer opnieuw op, en log weer in op skype.
   

GREAT THANKS TO BARBAFENNER!

Edited October 6, 2012 by datie9

[CONTROOL2 6]

Good job, barba. :)

[niknik655 2]

Thx for sharing barba.This is very usefull for all skype users! :excl:

[Guest]

Good job, barba. :)

 

Thanks guys, you all ;)

Just remember, I'm online on Skype and on Forum both, and if you need me, just call me!

 

P.S Be carefull on what you click on the Net ;)

[r_nuclearbom0 62]

I got that message from datie, and I clicked the link, well, a ZIP-File appeared, do not download that either, I have not been affected luckily :)

[datie9 72]

I got that message from datie, and I clicked the link, well, a ZIP-File appeared, do not download that either, I have not been affected luckily :)

 

sorry :(

[r_nuclearbom0 62]

sorry :(

No hard feelings bro, everything is OK :lol:

[FederalBureauFBI 2,881]

I couldn't even download it, the good old NOD32 terminated it. :lol:

 

Edited October 7, 2012 by FederalBureauFBI

[Alklines 1,751]

hahah never felt for it :ph34r:

[niknik655 2]

LOL XD

[r_caleb7770 2]

I got warned before i clicked it, lucky i didnt trust it.

[klitz 0]

Thx! ^__^

[r_TRUNKS2853450 14]

lol,that was a amature virus my com has shuted down that virus in a sec...anyway thx ;)

[niknik655 2]

Guys if you need more help or you didn't understand the guide contact either me or BarbaFenner.This virus has to stop!!

[Alklines 1,751]

wow O_O this VIRUS is worldwide http://community.sky...IMP/td-p/452481

 

:lol: :lol:

 

That link is for the Skype forum, don't worry.

Edited October 6, 2012 by Alklines

[niknik655 2]

http://desmond.image...jpg&res=landing

DO NOT BELIEVE SUCH LINKS THAT IS THE VIRUS.That practically means that's you? or that's your new profile pic?

[r_The_M.K0 71]

I don't have "roaming" on my search...

[AloiXThailandi 8]

so obvious mate.... ^_^

[Alklines 1,751]

:angry:

[niknik655 2]

Then chek for file:CEA.exe.Be careful the file can change its name!

[CONTROOL2 6]

Avast saved me :lol: Guys try to get anti-virus for websites. It can block websites that can hack your tanki account. ;)

[Valletta 834]

A friend of mine got this message and is now battling a severe virus on his PC:

 

" lol is this your new profile pic? http://goo.gl/UPhHf?img=*your profile name* "

Edited October 6, 2012 by Valletta

[hogree 4,179]

Thank you Barba, I deleted the file from my Downloads immediately, I hope that saved me.. I cant find the XXXnumber.exe or CEA.exe anyway, so just hope :?

[CONTROOL2 6]

The virus usually 3 letters and 1 number.