Skype spam virus

[hk21]

i have gotten a virus from my friend (not sharing link for obvious reasons) and i cant fix it, its a vorus that spams my friends with messages every 20 minutes and i was wondering how i can fix this and remove it from my pc. I have figured out the process is called C2C service and i closed that, i went to msconfig and disabled the thing from there, i went to my appdata (where msconfig said it as at) and i deleted that, and its still sending spam messages through my skype, plz help me.

i got windows 7 64-bit home premium

[Tamim · Accepted solution]

Change your Skype password immediately

https://login.skype.com/account/password-reset-request

In Skype application,

Go to, Tools >> Options... >> Advanced Settings

Click Manage other programs' access to skype

Remove any unknown application (if any)

download malwarebytes

http://www.malwarebytes.org/products/malwarebytes_free/

Run MBAM and use the FileASSASSIN tool to delete the all exe file found under AppData directory

C:\Users\tamim\AppData\Roaming

restore performance counter setting from backup (If any)

After you have used malwarebytes then do this online scan.
to make sure you have nothing else hiding away.
http://www.eset.com/onlinescan/ 

[boobooboo]

what about Mac ?

[kc4mts]

Although the files could have been downloaded to your system, I doubt that they could have been activated. Mac and Linux machines are rarely attack-able with trojans written for a windows environment. One exception to this is if you have a windows emulator on your computer...It could be affected by a windows trojan. In that case you would use the emulator and follow the instructions in the preceeding post (Re: Skype spam virus ) for removing the offending files.

[monikaenosaka]

Thanks! it worked for me

[Tamim · Accepted solution]

You are very welcome.

additionally run msconfig.exe and disable any unknown startup programs.

[mathkrazy]

thanks for the fix. however deleting the files didn't remove it from my startup tab in system config.

[Tamim]

try deleting any unknown entry, in this location

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

[letuangoc]

Let's do this :
go to this pc link :
Win( C) /users/Updatususer/Apps Data/Roaming

Delete 4 coloured item at the bottom
done
re - login

[fongthai]

the infected PC cannnot go to security websites like: eset.com, malwarebytes.org, ...