By using this site you agree to the use of cookies for analytics, personalised content and ads. Read more

Skype update gave me a virus

This topic has been archived. To keep discussions in the Skype Community relevant we archive topics that haven't seen activity in the past 6 months. Read more about about archiving
Casual Adventurer

Hello, a Skype update was available and i put it off for a few days, prolly like 2 or 3, and then finally installed it. A few hours later my Norton antivirus popped up saying an intrusion was blocked, few hours later, again.  I checked what programs had been installed/updated that day and it was only skype.  I figured it couldn't of been skype and whatever this virus was it just wasn't on the list. Next day another notifications of an attempt blocked this time i view more details and see this:

 

Network traffic from cdn.adnxs.com/p/1a/23/ea/b7/1a23eab730c35898c104265d6c326f1c.swf matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\SKYPE\PHONE\SKYPE.EXE.

 

this clearly saying its from skype.exe aswell as skype being the only thing installed that day tells me that update was a virus. Why is this happening? I've been using skype for years and never had problems.

Message 1 of 14 (3,105 Views)
13 Replies
Super Aviator

Most probably false positive.

 

You need to allow Skype.exe to your norton's firewall settings.

 

http://community.skype.com/t5/Windows-desktop-client/Cant-Connect-to-Skype/m-p/1251570/highlight/tru...

 

http://community.skype.com/t5/Windows-desktop-client/Skype-Start-Up-Error/m-p/1734654#M166379

 

http://community.skype.com/t5/Windows-desktop-client/cant-sign-in/m-p/1220738/highlight/true#M92277

 

http://community.skype.com/t5/Windows-desktop-client/Trying-to-log-in-but-it-fails-every-time/m-p/96...

Regards,
Tamim
__________________________________________________________________________________________
Location - Dhaka | Bangladesh - Standard Time Zone: GMT/UTC + 06:00 hour

If one of my replies has adequately addressed your issue, please click on the “Accept as Solution” button. If you found a post useful then please "Give Kudos" at the bottom of my post, so that this information can benefit others.
Message 2 of 14 (3,088 Views)
Casual Adventurer

I can use skype just fine still and i have skype aswell as all my usual daily programs allowed on my firewall.  The problem is that it says it's originating from Skype.exe while im in calls and when Norton doesn't block it it opens my firefox and goes to a malicious webpage like cdn.adnxs.com. I uninstalled skype for a day and had no attempts nor firefox opening to bad websites. But I need skype as its my main source of communication with a lot of people. Any ideas?

Message 3 of 14 (3,078 Views)
Casual Adventurer

I'm still having this problem, now im getting this one instead of cdn.adnxs.com. please help 

Message 4 of 14 (3,052 Views)
Casual Adventurer

This is still a problem, Norton forums are saying its from your ads, why they only started doing this in the new 6.6 I don't know but I want to revert to the old version, how do I go about doing this?

Message 5 of 14 (3,018 Views)
Super Aviator

You can uninstall current version of Skype from the control Panel and you can install Older Version.

Here is the Old version link:

http://download.skype.com/msi/SkypeSetup_6.5.0.158.msi

Regards,
Tamim
__________________________________________________________________________________________
Location - Dhaka | Bangladesh - Standard Time Zone: GMT/UTC + 06:00 hour

If one of my replies has adequately addressed your issue, please click on the “Accept as Solution” button. If you found a post useful then please "Give Kudos" at the bottom of my post, so that this information can benefit others.
Message 6 of 14 (3,017 Views)
Community Ambassador
Message 7 of 14 (2,971 Views)
Community Manager
cdn.com is the Content Delivery Network (that's where "cdn" in the domain comes from) that Microsoft is using to deliver advertisements from server locations next to you to ensure a smooth experience.
I've forwarded your reports to the relevant team inside the organisation. They've checked the content and also advised me to share that all content that goes up in the CDN are undergoing rigorous testing for malware first.
So the problem rather seems to be a false alert from your internet security/antivirus software. Please ensure to always use their most up to date signature data.

Found a helpful message? Give it a Kudo below to say "thanks" ¦ Latest Community News
Did my reply answer your question? Accept it as a solution to help others, Thanks.
Message 8 of 14 (2,917 Views)
Casual Adventurer

at first when it was just the cdn i wasnt quite worried because everyone assured me it was just ads. but now its changed into something that worrys me a lot, ill attach a picture of what the new attack from skype says.

 

This new intrusion seems to be trying to allow a url to bypass my norton while safe mode is off on my pc. It now says that the intrusion target is Norton360 instead of Cody-PC which makes me think its attempting to allow itself passed my firewall. Since this attack has started showing up I  have signed out of skype and stopped it from running on startup and have not had any problems, but now I cannot communicate with my friends. The black boxes are my IP address. Please help me find a solution so I can once again use skype or tell me if this new intrusion is just as harmless as the last "cdn" one.

Message 9 of 14 (2,888 Views)
Novel Adventurer
got this problem aswell.. its called command injections.. something is trying to get access to your bio so they can install programs on your computer or use your computer for Ddos attacks. really want to find out if this is a false positive or not.. someone help us please
Message 10 of 14 (2,875 Views)
Discussion Stats
  • 13 replies
  • 3106 views
  • 0 kudos
  • 9 in conversation