keronshb Posted December 26, 2013 ID:769049 Share Posted December 26, 2013 I tried asking this on the skype forums, but I've gotten absolutely no help. Initially Norton found an issue with this (it fixed it during an idle quickscan), but I'm not sure if it's a false-positive or not. Any insight will help as much as possible. I've also used MBAR, Malwarebytes and Spybot all on safemode and they came up with nothing afterwords. I just want to know if this was a false positive or not. Yesterday Norton did a standby quickscan and found (and removed) Trojan.Hachilem, which apparently steals outlook emails (which I don't use the program, only the online service) and registers them to porn websites. Anyway after a restart and safe boot scan with Norton, Malware Bytes, Spybot and Malware Bytes Rootkit, nothing else was found. I searched in the registry for any registries created by it and there was nothing. I also used Rogue Killer after I restarted in normal mode and it didn't find anything wrong. The file was located in: c\rogram files (x86)\skype\phone\00029192.tmp So I'm wondering if this might have been a false positive or not? I use noscript so I only use Java on the wesbites I trust, same for Flash. As for virus security, I already stated above what I use (Norton is the only one active at all times while the others are just scanners) and I have immunization applied with Spybot. So any insight? Thanks. EDIT: I'd like to note I haven't clickd on any skype ads or adds in general (I use adblock on firefox, but that doesn't prevent ads in skype). Also I haven't downloaded anything from any malicious website, skype or email any time recently. Ignore the similie, it transferred over here too for some reason. Link to post Share on other sites More sharing options...
Staff gringo_pr Posted December 28, 2013 Staff ID:769984 Share Posted December 28, 2013 Hello I cannot guarantee anything as I am not part of Norton but looking at the file this would be my take on it. A strangely named temp file could go either way but since it is a temp file I would not worry about it being removed - any temp file that is on the computer is either not needed or will be recreated when needed Gringo Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 31, 2013 Root Admin ID:771037 Share Posted December 31, 2013 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts