Steenkin' skype spammer

[gnoriac]

[14:00:03] Security System Alert ® says: WINDOWS REQUIRES IMMEDIATE ATTENTION
============================

ATTENTION ! Security Center has detected
malware on your computer !

Affected Software:

Microsoft Windows NT Workstation
Microsoft Windows NT Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003

Impact of Vulnerability: Remote Code Execution / Virus Infection / Unexpected shutdowns

Your system IS affected, download the patch from the address below NOW!

http://www.systemscan .org/?q=ca

Just got that load of crap come up as a skype conversation window. Would appear to be a con artist. Gave them an abusive reply then blocked the user.

[editor]

It's a new worm:
http://www.computerweekly.com/Articl...ting-users.htm

[gnoriac]

I checked through the linked articles and can't find any evidence on my pc of infection but I'm running an avg scan just in case. A quick whois of systemscan.org:

Domain Name:SYSTEMSCAN.ORG
Created On:08-Sep-2007 13:31:47 UTC
Last Updated On:08-Sep-2007 14:00:28 UTC
Expiration Date:08-Sep-2008 13:31:47 UTC
Sponsoring Registrarotregistrar, LLC (R114-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:1784678-R
Registrant Name:Andrej Kazanski
Registrant Street1:Pod Porohjem 199
Registrant Street2:
Registrant Street3:
Registrant City:Warszawa
Registrant State/Province:PL

So certainly new, he's only regd 3 days ago. I've informed skype as well.

[mhendo]

It's a new worm:
http://www.computerweekly.com/Articl...ting-users.htm

From your link, these are the steps you would need to take to actually get infected with this worm:

1. Open a chat message sent by someone you've never heard of.

2. Click on a link sent by that person.

3. View a dialog box asking for permission to run a file.

4. Click to accept and run this file sent by someone you've never heard of.

Are people on the internet really still stupid enough to do all this? The possibility just boggles the mind.

[GarfieldLeChat]

From your link, these are the steps you would need to take to actually get infected with this worm:

1. Open a chat message sent by someone you've never heard of.

2. Click on a link sent by that person.

3. View a dialog box asking for permission to run a file.

4. Click to accept and run this file sent by someone you've never heard of.

Are people on the internet really still stupid enough to do all this? The possibility just boggles the mind.

it would appear that gnoriac was 2 steps away from being infected so i'd err on the side of yes...

[rich!]

Are people on the internet really still stupid enough to do all this? The possibility just boggles the mind.

Recall a mate of mine attempting to explain virus-laden spam emails to a friend.
"So, you see that one? Subject looks dodgy and the sender's name makes no sense. If you open it like this, it'll ..."
*hard drive whirs*
*machine gets very busy*
"... shit..."
Took him a week to recover.

(Mind you, I remember when "virus by email" was a joke. Fortunately, BillG fixed that)

[gnoriac]

it would appear that gnoriac was 2 steps away from being infected so i'd err on the side of yes...

I count that as 4.

[Boris Sprinkler]

I count 3 and you still thought it was real person. :P

[gnoriac]

I didn't open the conversation, the person / worm did. So we're back to 4 if you accept mhendo's analysis.
I'm still unsure as to whether it was person or worm as the conversation they came out with is not exactly the same as the editor posted, for example there was no image with an embedded link. Do you know of a way of proving it beyond doubt?

[patrikana]

Okay friends, I have been using Gizmo for VOIP for over a year. I purchased and used D-Link VOIP Router 1402S so I could use a regular headset or cordless phone. I am no longer using Gizmo. Question: Does Yahoo Messenger allow me to use this router and phone? If so, where can I find information on what is needed to set it up. How to Use D-Link VOIP 1402S to make call-outs?