

Possible Skype Worm
Started by
Nvyseal
, Dec 19 2006 10:49 PM
7 replies to this topic
#1
Posted 19 December 2006 - 10:49 PM
We've received some queries about a possible Skype worm going around.
The situation is a bit confusing right now, but here's what we know:
* There is no massive outbreak going on
* There is something spreading on Skype, but only in limited numbers
* It is not exploiting a vulnerability in Skype but simply sending chat messages asking you to download and run the infected executable
* There seems to be two different and separate malware samples being talked about relating to this case, confusing things further
* One of them is named "sp.exe". We received a sample of this yesterday and added detection. This one is connecting to nsdf.no-ip.biz in its attempt to download additional components
* The other one is described in Symantec's recent description. We don't have a sample of this one yet but have requested it and should receive it shortly. This one downloads additional components from marx2.altervista.org.
F-Secure
The situation is a bit confusing right now, but here's what we know:
* There is no massive outbreak going on
* There is something spreading on Skype, but only in limited numbers
* It is not exploiting a vulnerability in Skype but simply sending chat messages asking you to download and run the infected executable
* There seems to be two different and separate malware samples being talked about relating to this case, confusing things further
* One of them is named "sp.exe". We received a sample of this yesterday and added detection. This one is connecting to nsdf.no-ip.biz in its attempt to download additional components
* The other one is described in Symantec's recent description. We don't have a sample of this one yet but have requested it and should receive it shortly. This one downloads additional components from marx2.altervista.org.
F-Secure
#2
Posted 19 December 2006 - 11:07 PM
thanks for the update, i rarely download files off skype luckily
#3
Posted 20 December 2006 - 12:37 PM
Thanks for the info Dave, I have to wonder is there really any piece of software that is secure?
#4
Posted 20 December 2006 - 04:20 PM
godless, on Dec 19 2006, 05:07 PM, said:
thanks for the update, i rarely download files off skype luckily
Well, the rest of us on there are screwed!! We download stuff from each other all the time!! I guess I am going to have to keep a closer eye on things for awhile.
#5
Posted 22 December 2006 - 05:38 AM
If you are getting something from one of us it would not be a virus, this is something you have to know you are sending.
#6
Posted 22 December 2006 - 02:25 PM
chriso_86, on Dec 20 2006, 11:20 AM, said:
Well, the rest of us on there are screwed!! We download stuff from each other all the time!! I guess I am going to have to keep a closer eye on things for awhile.
mo, used to send me tons of stuff, i just didnt download it usually
#7 Guest_scaramonga_*
Posted 22 December 2006 - 05:08 PM
Quote
mo, used to send me tons of stuff, i just didnt download it usually
Yeah....he's good at that




0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users