Skype-Defender
Skype-Defender is malicious software that will target Skype users. This password-stealing Trojan aims to steal user name and password that user may input on the fake login box.
Skype-Defender is a fake Skype plug-in that is usually dropped by another Trojan upon infecting a target computer. It will imitate Skype interface to steal information like user name, password, and other sensitive data.
Once the Trojan is executed, it will display a fake message box and prompt user to login to Skype to install this plug-in. The exact message states the following:
Skype-Defender Installed! Please login to your account to apply new plugins.
From that point, it begins to log every key press on the infected PC. Skype-Defender virus will also terminate running process of Skype and displays the fake log-in Windows to capture user name and password of its victim. Stolen user’s credential is kept on a log file that is scheduled to sent-out to remote attacker. On some instances, the fake log-in windows will display an error message saying that the user-name and password is not recognized. It attempts to let victim to sign-in twice to verify that the given credential matches.
This Trojan does not replicate on itself. Skype-Defender may also arrive as an executable file from newsgroup, Internet Relay Chat, file-sharing networks and spam e-mail messages.
Alias: PWS-Pykse
Damage Level: Low
Systems Affected: Windows 9x, 2000, XP, Windows Vista
Screenshot Image:
How to Remove Skype-Defender
Scan with Norton Power Eraser:
A free removal tool from Norton Antivirus was developed to remove unfamiliar threats without using the traditional AV signatures. This tool can run independently so there is no need for the full version of Norton or Symantec products. Download the tool from this location and start scanning the computer for viruses.
Scan with Portable Antivirus:
Most of the time, Trojan associated with a rogue program will disable Windows functionalities and prevent execution of any application including antivirus program that is locally installed. If this happens, you can try using a McAfee Portable Antivirus called Stinger. It can be downloaded from McAfee's official web site for free.
Notes
Microsoft Windows operating systems has built-in tool to reinstate system files and programs to its original normal state. Restoring Windows (see how) to its previous settings will override all the changes that Skype-Defender has caused to the system. However, this process is only useful if a restore point is created before the virus infection.