Fake malware alert
By
Villu Arak on November 30, 2007 in Trojans and viruses.
Some users have received the following message through Skype chat:
- - - - -
ATTENTION ! Security Center has detected malware on your computer !
Affected Software:
Microsoft Windows NT Workstation
Microsoft Windows NT Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
www.alertscan.net/?q=update
- - - - -
If you receive something like this through a Skype chat message, do not be alarmed. Instead, ignore it and block the sender. This is chat spam aimed at scaring users into purchasing an alleged antivirus product.
The purported remote virus scan performed by the site behind the URL is also a fake: it is a harmless movie, not a real scan. The "results" of this fake scan are also false.
That said, if you receive a chat message from an unknown user and/or an internet link that you're not sure of, please err on the side of caution and do not click on such links.





Comments
i just had a message from "Update Notice" user saying the following
WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows NT Workstation
Microsoft Windows NT Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updatew.org/?q=scan
nesto_the_fez | Thursday, Jan 3
I just received an identical message to the one above. Why doesn't Skype have a feature that allows users to report a message as spam? The account that sent it could then be immediately cancelled, and this would save a number of Skype users out there from being defrauded by these scammers. This is a very important missing feature of Skype!
tkandell | Monday, Jan 21
I just received identical messages to the ones posted above. Although the web address that was given me was http://www.onlinemon.net/?q=scan. How could they send me a text message without asking my permission first? Is there a way to block those messages?
kristie_burns | Thursday, Feb 7
I just received the same thing this time with www.onlinemon.info/?q=scan from user online.notice.ko8 as an address.
My chat settings allowed chats from anyone, though.... so I'm to blame.
Cheers,
Thorsten
tc_detecon | Tuesday, Feb 19
Folks,
Regarding the original post by skype at the top of the page,
I got that fake mal ware thing as a chat, and I was wondering if it was just a coincindence but it was only after getting that chat that I began having problems with my skype. However, Skype was very helpful in resolving the problem with my audio settings, and I am back in business.
Is it remotely possible for malware to change your settings on skype with out your knowledge or consent...I guess this is my question for the Skype experts.
tww1962 | Tuesday, Mar 4
I also received the same message. It made me aware to access to people that I don't know. I also sent an email to: support@skype.net so they would be aware. Slimeballs! Wonder what they would do if they all worked hard and just told the truth (hey now, there's a novel idea!). Thanks for the blog notice- it helped!
genevers1 | Tuesday, Mar 18
I just received the same message from "Registry Alert ®".
Apparently Skype support has not figured a way to block, or even report spammers and malware distributers yet.
netwallah | Friday, May 23
I have received this same message as well as others. I have already checked all the privacy settings to only allow users in my list to contact me yet they still come through. I also get unwanted and unsolicited chats from people I have never known. When the settings in Skype Privacy say "only allow chats from people in my contact list" then it should work that way. I have been complaining to Skype about this for a long time and have had NO response.
I am very frustrated!!!
chatwithleeanna | Sunday, May 25
Ok, I got one of these spam messages via skype chat the other day. Today the person who's user name I found associated with that chat message initiated a call with me. (I have now changed my privacy settings so this won't happen again).
I was not in the room, my children answered the call and this stranger proceeded to solicit information from my children. This person is totally unknown to me and misrepresented himself to my children in order to obtain information about them.
I have submitted this to support, but think others out there should know that this is happening.
jennifermeow1 | Monday, May 26
I just got it then. see below for the version i recieved. If you get it, DO NOT CLICK ON THE LINK.
WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows NT Server 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.onlinemonitor.info/?q=scan
chrisgerard | Thursday, May 29
I use Skype at work, but not at home. I use it at work, because everyone has to use the same IM client so that we can all easily communicate. I don't use it at home because of Skype's apathy towards Spam/Phishing.
Like most above, I received the same basic message, with slight variants:
[1:09:36 PM] RegAlert ® says: WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows NT Server 4.0
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.registryupdate.org/?q=scan
I've been using computer for ever and I'm smart enough to know it's a scam. For someone less technical like my mom however, given enough things like this she eventually will click one. I understand the difficulties in preemptively preventing spam... but they are just that: difficulties. At the very least, Skype MUST implement a feature so that when someone like myself receives spam, they can take actions to freeze or delete the account sending spam.
To Skype: Listen to your users. Skype is a very successful and popular platform for IM and such, and it's pretty clear myself and the other users above want to keep using your service... just as long as you listen to repeated suggestions and do something about them. If not, there's always gmail, aim, msn, yahoo, irc, meebo, etc, etc, etc...
justin.pope | Monday, Jun 9
look one of many users that get the same message
thank goodness the scammers are getting stupider everyday
this message gave me a good laugh
WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows NT Server 4.0
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.registryupdate.org/?q=scan
joseph_trout | Thursday, Jun 19
hey if you go to tools/options/privicy it looks like there is a way to block
cant figure out how to use it though
joseph_trout | Thursday, Jun 19
never mind go to your history and find the spam message and right click
there is an option to block the user of that chat or call
joseph_trout | Thursday, Jun 19
for Villu Arak
regarding your post on skype about spam
you said to block any spammers
it might be helpful for others if you had explained how
just so you know but thanks anyway
joseph_trout | Thursday, Jun 19
I am a private investigator and received this as well. Knew it was BS but clearly there will be those that do not. I also received a Spoof chat for Nigerian 914 fraud yesterday. Am a bit frustrated that Skype has no way to notify them of these guys or at least getting them to act upon it.
I told the 914 that I was turning him into Interpol but it will have no affect. Educating the public is the only way to go. In my past discussions with the FBI it was made clear there is nothing they can do.
johnbrew | Thursday, Jun 19
This is the one I got. "Http:www.registryupdate.org/?=scan" Strangely, I was in a texting chat at the time and the next days chat disappeared for no apparent reason. I also had problems adding and deleting messages next to my username and could not send any files. I deleted both the scam message and uninstalled System Mechanic Professional. No more problems adding or deleting messages next to my username. I have never been able to do a copy and paste to that box. Not sure yet if I can send a file, and not sure if it was the scam or System Mechanic Professional.
lambadafan | Friday, Jun 20
Why isn't Skype responding to us on this? I can't only accept calls from contacts because I use my Skype line as a business line. But it seems if every few days I get the above messages along with others soliciting porn. Why can't we at least report these users to Skype - even if we can't initially stop them??
tania.alawar | Saturday, Aug 16
After recieving this message I tried to do, as Villu Arak above said and "ignore it and block the sender." Unfortunately he did not mention how to block the sender. WTF?
So, after 20 minutes wasted, I finally figured out how. You can't do so from the chat window.
You have to open Skype, then click 'tools' then 'Advanced' then 'Manage blocked users.'
Then you have to click the dropdown (because skype couldn't make intuitive) on the lower right under the text that says: "You can prevent a person from contacting you ..." and there you will find thie person/bot that sent you this phishing chat message.
In my case it was "Registry Repair Online @ (registry.repair.online.kaka20)"
Please, Skype, figure out a better way to deal with this stuff.
billdoubleyou | Wednesday, Aug 27
I just received the same thing as above. Despite the good advice from fellow posters, I had to figure out how to block the user myself. I must have a different version of Skype. If it helps anyone....from the Chat Window I clicked on the bubble/button that directs you to the menu...from there you can block the user.
I don't get as many spammers on Skype as I do on Yahoo....but I'm glad I didn't fall for this one. I appreciate all the comments here.
By the way....I'm one of those older "mothers" who knows her way around the computer enough to be wary of these phishing scams.
sshaw2006 | Thursday, Sep 4
I received this warning message today.
I solved the problem by uninstalling SKYPE.
I would have preferred to simply report the message and block the sender, but SKYPE didn't seem to have the ability to do either of these functions easily.
Uninstall is intuitive and easily accomplished from Control Panel.
nesielheum | Monday, Sep 29
I just received this one today... I was not at the computer when the message was sent to me, yet user (update.update14) was able to "hack" my paypal account and charge skype credit SEVEN times in a span of 9 minutes.... I wasn't here to click on a link or anything like that. I came back from running errands 5 hours later to find that this had happened. The scary thing is, my paypal and skype accounts are NOT linked. And, the skype credit did not go to me. It was only charged to me. I have contacted skype support and paypal fraud about it - but, I don't know how this one will pan out. They charged in euros, so it's going to run me about $100 USD, if no one can fix it.
armygirleann | Wednesday, Oct 15
I just received this message today and instantly figured out that it was a scam... If this person is known to do this why has there account not been disabled?
mrnavipacho | Wednesday, Oct 22
How in the world do they even get my skype address???
Who allows that??
inthistogether | Wednesday, Dec 10
Why are chats allowed to talk without being on the contact list?
glenn_skype | Thursday, Jan 22
It's Tuesday, 23rd February, and I just got hit with this scam--I did check out the site, but backed off because it did look very fake. I am now following up with a virus scan with my anti-virus program.
playwrite27 | Tuesday, Feb 24
It's Tuesday, 23rd February, and I just got hit with this scam--I did check out the site, but backed off because it did look very fake. I am now following up with a virus scan with my anti-virus program.
playwrite27 | Tuesday, Feb 24
February 24, 2009---I just got this one, looks like the same scam with a different name and different URL. Obviously didn't click on the link, but I've wasted a good fifteen minutes trying to figure out how to report this to Skype, only to find out that you can't, and to find this thread.
They really ought to do something about this, because I'm sure there's people out there who aren't computer-savvy enough to realize that Windows wouldn't use an INSTANT MESSAGE to alert you that you have a problem with your computer. If it had been my grandmother who'd gotten this fifteen minutes ago, she'd already have had her identity stolen or something.
There's another thread about the missing report button. They took it off awhile ago because people were "abusing" it. Well, that's part of running a business, isn't it? AIM and Yahoo have report buttons, and they have to sift through what's a real scam and what's some kids being stupid online, and they don't even charge for their services. Skype is making money hand over fist with this service, and they don't even provide proper protection for their members.
Makes me glad I don't pay for Skype, though. I only use it for computer-to-computer calls with clients, for their convenience. If it were completely up to me, I'd stick with Digsby and the old school messengers. At least they try to do something about scammers and phishers. /End rant.
Sidebar, I really wanted to write back to this person, "What if you have Windows 95?" and see what happened, since it's not included in the list.
Message text to follow, do NOT click on the link.
[4:20:21 PM] Online Notice says: WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows NT Server 4.0
Microsoft Windows Win98
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair
utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.regscan.cc/?q=scan
prophecygirl | Tuesday, Feb 24
I Started using Skype after here great things about it. Then I get this crap. Come on Skype get with the program. I do not need or want a malware delivery service on my precious laptop. Please for the love of the internet stop allowing unsolicited chat.
I am torn over what to do here. Do I uninstall this useful tool due to this huge security hole to protect my children. Or, do I leave Skype installed and sue them if my children get victimized by some phisher. I shouldn't have to make this decision. You people should fix the problem in your software. It is in your interest to protect your customers!!!
d3v1ldad | Sunday, Mar 1
the "Block User" doesn't appear to have any effect! I've had the exact same spam from the exact same Skype username up to a dozen times in under a minute! clicked "block" and in Skype 4 (Windows) checked "Also report this user for abuse" each time... seconds later got the the exact same spam from the exact same Skype username!!! very frustrating!
I believe that 99% of this cra- must be from "bots" so how about a simple CAPTCHA or "real human verification" for messages from users not in my contact list?
the_rose_of_suthep | Tuesday, Apr 14
I just received a message like this after logging on today. I am so glad I decided to do a search about it before going to the site listed. Thank you for telling me to block the sender, however, isn't there a way to alert skype users that there is the specific scan beforehand? Because I know I would have totally gone along with it had I not just out of curiosity decided to search for it.
Whew. That was close.
kirstin.chubb | Wednesday, May 6
The date today is Wed., 6-24-2009. I just received this skype message. Thank God you posted this warning!!
kepha1 | Wednesday, Jun 24
I wasn't so smart. I was fooled by the message, saying I had a trojan and malaware So now what do I do?? I ran spybot, and avg. The only thing I have noticed is that I have a hard time getting on to the web.
Do I need to take this to a professional asap???
sancape28 | Monday, Jul 13
I wasn't so smart. I was fooled by the message, saying I had a trojan and malaware So now what do I do?? I ran spybot, and avg. The only thing I have noticed is that I have a hard time getting on to the web.
Do I need to take this to a professional asap???
sancape28 | Monday, Jul 13
I had only been on scype for a couple of days. I was smart enough to block a message in french from an unknown, but wasn't saavy enough to ignore what I thought was a warning from microsoft, so please let me know what kind of damage is being incurred on me and others.
sancape28 | Monday, Jul 13
Today I received this message when I opened up my Skype: Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.securityinfoline.net/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser ! Scumbag hackers trying to get me to download their trojan infected malware. Anyone have any ideas on how to prevent these scumbags from putting out the bait and getting some unsuspecting Skype user from inviting these parasites into and overtaking their computers.
chrishelf | Tuesday, Jul 14
I just got this on my chat. I blocked them.
Does Skype look into these? How do I notify them of this?
Here's what was sent via chat:
[11:32:30 AM] Registry Security says: WINDOWS REQUIRES IMMEDIATE ATTENTION
=============================
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updatealert.net/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
ericrossborough | Tuesday, Jul 14
Just to keep the record updated, I just received this fake malware alert on Sept. 17, 2009. My question is - why doesn't Skype block this sender from access to the system?
maryn.boess | Thursday, Sep 17
Hi, I received a similar message just now, a few minutes ago, posted below.
What should I do about this? Is there a way to report this to skype?
Thanks!!
Online Notification
11:35 PM
******************************************
URGENT SYSTEM SCAN NOTIFICATION ! PLEASE READ CAREFULLY !!
http://www.sysnotice.com/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
FULL DETAILS OF SCAN RESULT BELOW
******************************************
WINDOWS REQUIRES IMMEDIATE ATTENTION
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://[url deleted. i have it saved, though]
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
eturnlrecurrence | Monday, Sep 28
I got one of these last night and I see that the original post is dated November 30, 2007 (almost two years ago). Obviously it's the same people sending these as before. Is anything being done to identify the perpetrators?
john.l.ries | Thursday, Oct 1
Here is mine, received today, sender now blocked:
[10:16:58 AM] Online Notification says: ******************************************
URGENT SYSTEM SCAN NOTIFICATION ! PLEASE READ CAREFULLY !!
http://www.updateondemand.com/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
FULL DETAILS OF SCAN RESULT BELOW
******************************************
WINDOWS REQUIRES IMMEDIATE ATTENTION
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updateondemand.com/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
aeesolar-davy | Tuesday, Oct 6
Just got one last night, apparently it continues, this 'user'
had the 'name'
Online Notification
getting a bit more official looking
soulofto | Thursday, Oct 8
Skype does have a way to block and report spammers. Once you click on the message at the top of the page there is a box that says "Block" once you click on that another box comes up that ask if you want to report spammers and confirms the "Block" Hope this helps some of you.
jim.boggs | Wednesday, Oct 21
I have gotten one today from update.info.la9, and the last part is:
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updatels.org/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser!
What mainly made it seem fake is how he wanted you to click on the add to contacts button. the link is also different from the ones I have seen. There must be more than one person doing this spamming! Even though that has become quite obvious...
dgurske | Thursday, Oct 29
I just got one from update.info.la8, and blocked the sender and reported abuse.
The content is below:
----------------------------------------
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updatepd.org/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser!
nnnortonian | Thursday, Nov 5
Hi, that's what I received recently - 11/06/09 ( I put date, since I do not see year on posts) from Skype name "Update info", I presume, that is also some kind of spyvare, but I did not go there:
[9:33:57 AM] Update Info: ****************************************
URGENT SYSTEM SCAN NOTIFICATION ! PLEASE READ CAREFULLY !!
http://www.updatevx.org/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser !
FULL DETAILS OF SCAN RESULT BELOW
****************************************
WINDOWS REQUIRES IMMEDIATE ATTENTION
ATTENTION ! Security Center has detected
malware on your computer !
Affected Software:
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows 2000
Microsoft Windows Server 2003
Impact of Vulnerability: Remote Code Execution / Virus Infection /
Unexpected shutdowns
Recommendation: Users running vulnerable version should install a repair utility immediately
Your system IS affected, download the patch from the address below !
Failure to do so may result in severe computer malfunction.
http://www.updatevx.org/
For the link to become active, please click on 'Add to contacts' skype button or type it in manually into your web browser!
neringa45 | Friday, Nov 6