IRCbot Trojan Spoofing Skype

[mandy]

Security firm MessageLabs has detected a new variant of the IRCbot Trojan disguised as the latest release of the popular Skype VoIP software client version 1.4.

If executed, it attaches a malware program that displays a fake "installation error" box.

However, it is actually installing itself as sysdir%remote.exe, altering the registry and shutting down shared access and Windows update services

The subject lines in which the code arrives has several variants including "Hello. We're Skype and we've got something we would like to share with..."

full article: http://www.internetnews.com/security/art...hp/3556741

[stardust]

Yikes!  I already downloaded Skype awhile back.  Have not activated it, yet.  Thanks for the 'heads up'!

[amy]

If you downloaded directly from the Skype site you're safe.

If you receive an email advertising Skype and follow a link--watch out.