Malicious Links Spreading On Skype
May 20, 2010 Computer Safety Tip
The majority of people all over the world make use of Skype. This may be one of the reasons why malicious online
attackers are now using Skype in order to achieve their malicious goals. It seems like online attackers are doing the rounds and this time Skype users are the targets. This scary scam campaign is targeting Skype users all across the globe.
How this works is that innocent users will get a message which appears to be from someone in their contact list. This message will try and get the user to click on a link. This link has the domain [blocked]4.171.116. All the links are malicious and cannot be trusted. This is part of the bigger plan in order to infect your computer.
One of these links actually downloads a dangerous file which has been detected by Trend Micro as:
WORM_PALEVO.AZA.This is very dangerous as it actually terminates the Windows Update Service and tries to get connections to the remote servers which are {BLOCKED}.97.166 and {BLOCKED}.77.59 using TCP ports 80 and 1234.
This worm is very dangerous and runs the risks of completely destroying your computer system. It is able to create malicious registry entries. This will enable automatic execution upon every startup. It may also modify registry keys as well as certain entries during the process of installation.
This malicious worm runs on the following platforms: Windows 98, ME, NT, 2000, XP, and Server 2003.This may be seen as yet another reason why you should be extremely careful when clicking on any links anywhere. It is strongly advised to always have up to date software running on your computer in order to protect your computer at all times.








