Skype.exe infected with ws.trojan

Norton Security | Norton Internet Security
1

My skype.exe has been infected with trojan therefore i cant use skype :smileysad: Is there anyway i can remove this stupid virus from my skype so i can install and use skype again.

2

Im using norton internet security 19.2.0.10 I'm on a windows 7 hp computer, im not sure what a 32 or 64 bit is (I'm not good with computers) I havent run live update i've done a full system scan and got rid of all that trojan stuff and fixed the errors, i've reinstalled skype because the virus was in the skype exe, and when i try to log into skype it says "Cant connect" i'm pretty sure the reason is, is because norton keep blocking it (I can take down the disable the security center thing then skype will start working again) in my quarintine thing it has all of those files in it and i have the option to restore but I have no idea what that is so i havent done it.

Thanks for the great response time :D

3

Hi NeilAsh:

 

With Administrator level access, please perform the following:

 

I would first suggest clearing your NIS 2012 Full Security History, which will also delete the contents of Quarantine.

(History is available for access under the Advanced view in the NIS interface.)

 

Then click: Settings -> Network -> Smart Firewall -> Program Control-> Configure.

 

Go slowly. Look up and down the list for Skype, If you find it, please see that Access is set for AUTO. See...

 

1-16-2012 9-04-55 PM.png

 

If the Rule is not set to Auto, kindly change it to Auto and apply/save your changes.

 

Try Skype again.

 

If no go, uninstall Skype and reinstall it after deleting the above Skype rule. Be sure to apply/save your changes in NIS.

Upon the reinstall of Skype a new Firewall Rule should then be created.

 

Please post back and let us know if that corrects it.

 

Thanks!

 

Atomic_Blast :)

4
NeilAsh wrote:

Im using norton internet security 19.2.0.10 I'm on a windows 7 hp computer, im not sure what a 32 or 64 bit is (I'm not good with computers).....



Hi NeilAsh,

 

It may not be relevant,  but for future reference, to check if you have a 32 or 64 bit system, click Start and right click Computer.  Select Properties.  This will bring up information about your system.  I hope this helps.

 

Dave.

5

Hello NeilAsh

 

Could you tell us which ws. trojan you had or have? I would suggest that you run an on demand scanner and make sure that all remnants of the trojan are in fact gone. One recommended one is the free version of Malwarebytes which you can find here.

 

 

Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.

You can find Malwarebytes here

http://www.filehippo.com/download_malwarebytes_anti_malware/

It is a safer location to get the program from than malwarebytes themselves because some malware creators have large lists of sites that they block. Please be careful to down load the correct program ----the FREE version of MALWAREBYTES

(Thanks to Delph for providing the alternative site)

 

 

Please come back and let us know how you made out. Thanks.

6

My skype.exe has been infected with trojan therefore i cant use skype :smileysad: Is there anyway i can remove this stupid virus from my skype so i can install and use skype again.

7

It didnt work so i deleted the rule reinstalled skype, then when i opened it a thing popped up from norton saying it blocked skype from using the internet. Is skype not a safe program?

8

I used malwarebytes and nothing malicious was detected, I fixed skype so its not blocked, im not sure if i should keep it blocked or not how can i stop this ws.trojan from coming again?

9

I just got on skype again ran a scan That virus is on skype... Again Its called ws.trojan.H..

10

Hi NeilAsh:

 

Skype itself is a fine program to use. Did you download it from Skype?

 

Please run another Full System Scan in NIS and when complete, do the same with MBAM.

 

I personally, have not seen a False Positive from Skype, so we need to check further and ensue that

your system was not more compromised than first thought.

 

Let us know the results for both scans. We will be here.

 

Thanks,

 

Atomic_Blast :)

11

Hi.

 

Found this (note the date):

 

http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2011-102713-4647-99&vid=42297

 

and this...

 

http://portableapps.com/node/30544

 

I hope that you did download the setup from Skype itself. Again, let us know when complete.

We will go from there, no worries. :smileyhappy:

 

Thanks,

 

Atomic_Blast :)

12

I scanned again after i exited out of skype there was no virus anymore, however if i start skype and scan it will say there is one. Maybe norton just thinks their is one?

13

Hi NeilAsh:

 

Did you complete both the NIS scan and the MBAM scan without any detections?

Are all the settings in NIS set to their defaults?

 

If yes, run Skype again and kindly post a screenshot of the detection. Here's how...

 

http://community.norton.com/t5/Forum-Feedback/Forum-Tip-How-to-post-screenshots-in-the-forum/td-p/254415

 

We will advise from there. A False Positive is possible and if so, we will show you how to fix that.

 

Thanks for your cooperation!

 

Atomic_Blast :)

14

Just finished norton scan and it didnt get anything but tracking cookie. starting the other scan now

15

Finished the other scan still nothing, it only seems to find the virus when im logged onto skype

16

Hi NeilAsh:

 

Good. :smileyhappy:

 

Please follow this procedure and advise if it corrects the issue at hand.

 

Thanks!

 

Atomic_Blast :)

17


Nevermind when I launch skype it stil does it :(Untitled.png

18

Hello NeilAsh

 

May I recommend that you send the skype file to be further analyzed please.

 

 

Please use this link if you think that a file is a false positive

:
https://submit.symantec.com/dispute/

If there is a possibility that the file might be infected, please submit it to Symantec using this link:


https://submit.symantec.com/websubmit/retail.cgi



Another alternative which is fast you can use Virus Total

http://www.virustotal.com/index.html


(Thanks to Yaso for providing the links)

 

 

I would try submitting it to virustotal to get a quick analysis and you can also submit it to Symantec as a file in dispute and see what that shows up.

 

 

Please come back and let us know what they say. Thanks.

19

Hi NeilAsh:

 

If you go into Settings -> Real Time Protection, kindly click on Use Section Defaults (lower right), Apply and Click OK.

Then try Skype again.

 

If it doesn't work, let's cleanly remove and reinstall NIS 2012 with this tool.

You will need to backup your Product Key and Identity Safe Data (if any) for the reinstall.

 

Kindly advise as to your progress. Thank you.

 

Atomic_Blast :)

20

sorry for all the questoins, but how would i upload the skype file, for some reason i can only find the shortcut when i press browse on virustotal