It works because people trust their friends, Also Porgi i think you have been caught out, i get random messages from you with picture links so you need to change your PW. Basically the virus gets your username and password and sends it to a server. This then logs into your account and sends links to random contacts.
Yeah, researched on it without knowing, from what I can tell, they can't log on while you are, so it'd take the virus to be on your computer to spread to another through a chat, changing your password prevents the server from logging onGrid of any potential problems on your computer, and if need be, stop sharing files, I never share, thankfully, quite simple to do. Prevent from spreading, disable it, then destroy it.