Donnerstag, 19. Dezember 2013

You received a new message from Skype voicemail service

Fake email “You received a new message from Skype voicemail service.” enthält Schädling

This is an automated email, please don’t reply.

Voice Message Notification
You received a new message from Skype voicemail service.

Message Details:

Time of Call: Tue, 26 Nov 2013 10:20:24 -0400
Length of Call: 38sec

Listen to the message
in the attached file.
Lost Password · Account Settings · Help · Terms of Use · Privacy

If You Are Still Having Problems
If you’re still having difficulty retrieving your Skype Name please contact a support agent via

Protect Your Password
Skype staff will NEVER ask you for your password via email. The only places you are asked for your password are when you sign in to Skype or on our website if you want to buy something or check your account. You will always sign in via a secure connection, and we ask you to ensure that the address in your browser begins exactly like this It should also show a little padlock symbol to indicate the secure connection.

Be alert to emails that request account information or urgent action. Be cautious of websites with irregular addresses or those that offer unofficial Skype downloads. Security updates and product upgrades are made available at or using the client’s upgrade function.

© 2003-2013 Skype and/or Microsoft. The Skype name, associated trademarks and logos and the “S”
logo are trademarks of Skype or related entities.
Skype Communications S.a.r.l. 23-29 Rives de Clausen, L-2165 Luxembourg.

Die Links innerhalb der Nachricht sind in Ordnung, aber der Anhang enthält einen Schädling. Die email ist nicht wirklich von Skype und es gibt auch keine Nachricht für Sie.

The attached ZIP file has the name and contains the 151 kB large file Skype_Voice_M_497564___random_numbers___872345.wav.exe.

The trojan is known as Trojan.Agent.BAWV, UDS:DangerousObject.Multi.Generic, Trojan.Zbot, Trojan.Agent.BAWV or Mal/Generic-S.

At the time of writing, 7 of the 46 AV engines did detect the trojan at Virus Total.

Use the Virus Total permalink and Malwr permalink for more detailed information.
SHA256: c95780fa4688d3437a4558977d0ba58ae6d63e01af3bb6197910a0bff9e3ea84