How to remove the Skype virus. 11-10-2012, 07:49 PM
#1
Okay, so as you may know There is a new virus that is going around on skype right now.
What it does is once you click the link it sends the link to all your friends in skype.
It also installs a backdoor into your computer, And keyloggers and other files. It blocks deletion of the virus, CMD and taskman.
So now once you have been infected as you can tell there is nothing you can access and every time you reboot windows it will open a page similiar to the one displayed below.
![[Image: FBI_G_D_M_V.jpg]](http://trojan-killer.net/wp-content/uploads/FBI_G_D_M_V.jpg)
They are trying to fool you into believing you will be facing serious consequences by the United States Federal government, which they try to get you to pay them with moneypak codes and once they receive a working code your computer will be unlocked.
But I highly doubt you are willing to pay these scumbags, so I am going to show you how to fix it and get rid of this virus.
Okay so the first thing you are going to want to do is to power down your computer, now once your computer reboots it should display a menu screen like the one displayed below
![[Image: IC353811.jpg]](http://i.technet.microsoft.com/dynimg/IC353811.jpg)
You are going to want to go ahead and select option number 3 "Safe mode with command promt" once you have selected this option it will start to load a bunch of drivers and then will boot windows in safe made, and should like the image displayed below.
![[Image: safemodecp-c.jpg]](http://0.tqn.com/d/pcsupport/1/0/k/0/-/-/safemodecp-c.jpg)
Now once you are booted in safe mode with the command promt window open, you will type this "control.exe", now what this does is it opens up the control panel which from here you can manage your accounts, and such.
Now once you have the Control Panel open, go ahead and select "Add or remove user accounts" then at the bottom left press "Create new account" go ahead and create a new administrator account it does not matter what the username is.
Now once you have created the new administrator account, go ahead and shut down your computer.
Then reboot as normal, once booted it will ask for you to sign into an account go ahead and sign into the new administrator account we just created.
It will setup your new account, then once the account is setup open your task bar then open "Computer" once that is open look for your Local Disk, once you have found your Local Disk it is usually the first storage device go ahead and open it up then look for the "Users" folder look for your infected user open up the infected users account folder then at the bottom of the folder you should see two "exe" files at the bottom like in the picture displayed below.
![[Image: 6VGqi.png]](http://i.imgur.com/6VGqi.png)
Just delete the two files and then reboot your computer and you should have successfully removed the virus.
To just be sure, I would recommend running a virus scan afterwards to remove any files that may still be on the computer.
Recommended to use Malwarebytes.
http://www.malwarebytes.org/
This is my first tutorial, I really hope you think I did a good job, Hopefully this will just be one of many!
What it does is once you click the link it sends the link to all your friends in skype.
It also installs a backdoor into your computer, And keyloggers and other files. It blocks deletion of the virus, CMD and taskman.
So now once you have been infected as you can tell there is nothing you can access and every time you reboot windows it will open a page similiar to the one displayed below.
Spoiler:
They are trying to fool you into believing you will be facing serious consequences by the United States Federal government, which they try to get you to pay them with moneypak codes and once they receive a working code your computer will be unlocked.
But I highly doubt you are willing to pay these scumbags, so I am going to show you how to fix it and get rid of this virus.
Okay so the first thing you are going to want to do is to power down your computer, now once your computer reboots it should display a menu screen like the one displayed below
Spoiler:
You are going to want to go ahead and select option number 3 "Safe mode with command promt" once you have selected this option it will start to load a bunch of drivers and then will boot windows in safe made, and should like the image displayed below.
Spoiler:
Now once you are booted in safe mode with the command promt window open, you will type this "control.exe", now what this does is it opens up the control panel which from here you can manage your accounts, and such.
Now once you have the Control Panel open, go ahead and select "Add or remove user accounts" then at the bottom left press "Create new account" go ahead and create a new administrator account it does not matter what the username is.
Now once you have created the new administrator account, go ahead and shut down your computer.
Then reboot as normal, once booted it will ask for you to sign into an account go ahead and sign into the new administrator account we just created.
It will setup your new account, then once the account is setup open your task bar then open "Computer" once that is open look for your Local Disk, once you have found your Local Disk it is usually the first storage device go ahead and open it up then look for the "Users" folder look for your infected user open up the infected users account folder then at the bottom of the folder you should see two "exe" files at the bottom like in the picture displayed below.
Spoiler:
Just delete the two files and then reboot your computer and you should have successfully removed the virus.
To just be sure, I would recommend running a virus scan afterwards to remove any files that may still be on the computer.
Recommended to use Malwarebytes.
http://www.malwarebytes.org/
This is my first tutorial, I really hope you think I did a good job, Hopefully this will just be one of many!
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
![[Image: 2Ag85.gif]](http://i.imgur.com/2Ag85.gif)
![[Image: U2JKI5T.png]](https://i.imgur.com/U2JKI5T.png)
![[Image: XmCam.png]](http://i.imgur.com/XmCam.png)
![[Image: 1Ja2t.png]](http://gfxf.net/images/2012/11/06/1Ja2t.png)
![[Image: JchOGM.png]](http://imageshack.com/a/img923/2406/JchOGM.png)
