Win32/PSW.FakeSkype [Threat Name] go to Threat

Win32/PSW.FakeSkype.A [Threat Variant Name]

Category trojan
Size 706560 B
Detection created Feb 14, 2012
Detection database version 6882
Aliases Hoax.Win32.ArchSMS.mfyk (Kaspersky)
  PWS:Win32/Sypak.A (Microsoft)
  TR/PSW.Sypak.A.1.A (Avira)
Short description

Win32/PSW.FakeSkype.A is a trojan that installs MSIL/PSW.FakeSkype.A malware.

Installation

When executed the trojan drops in folder %appdata%\Skype\ the following file:

  • Skype.exe (296960 B, Win32/PSW.FakeSkype.A)

The file is then executed.


The trojan moves the following files (source, destination):

  • %programfiles%\­Skype\­Phone\­Skype.exe, %programfiles%\­Skype\­Phone\­Skype.exe.bak

The trojan creates the following file:

  • %programfiles%\­Skype\­Phone\­Skype.exe (129024 B, MSIL/PSW.FakeSkype.A)

After the installation is complete, the trojan deletes the original executable file.

Other information

Trojan requires the Skype to run.

Please enable Javascript to ensure correct displaying of this content and refresh this page.