gHacks Technology News | Latest Tech News, Software And Tutorials » skype virus http://www.ghacks.net A technology news blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Sat, 11 Feb 2012 09:52:46 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Quick Way to Remove the Skype Wormhttp://www.ghacks.net/2007/09/12/quick-way-to-remove-the-skype-worm/ http://www.ghacks.net/2007/09/12/quick-way-to-remove-the-skype-worm/#comments Wed, 12 Sep 2007 20:23:32 +0000 Martin Brinkmann http://www.ghacks.net/2007/09/12/quick-way-to-remove-the-skype-worm/ If you do not know yet there is a Skype worm spreading around that is affecting Skype Windows clients. The virus automatically sends a chat message to other Skype users containing a link to an image on a website where he is prompted to download a file with the .scr extension using a simple redirection

If, and only if, the user executes the file his computer becomes infected with the w32/Ramex.A virus which uses Skype’s public API to access the infected pc. Many antivirus companies like Symantec, Kaspersky and F-Secure have already updated their virus definitions to detect and remove the worm.

It is however also possible to remove the worm manually by following the steps outlined below:

1. Restart the PC in safe mode
2. Run regedit
3. Go to HKLM/software/microsoft/windows/currentversion/runonce find entry with mshtmldat32.exe. Delete this entry.
4. Go to Windows\System32 directory and delete following files: wndrivs32.exe, mshtmldat32.exe, winlgcvers.exe, sdrivew32.exe
5. Go to windows/system32/drivers/etc
6. Find file hosts
7. Open it with notepad, ctrl+a and delete all entries (this will resume your antivirus updates), save, close.
8. Restart the PC.

via Skype blog

]]> http://www.ghacks.net/2007/09/12/quick-way-to-remove-the-skype-worm/feed/ 4