So according to SecurityFocus, there’s now a trojan which claims to be a new version of Skype

The malware arrives in an attachment in messages posing as the latest (v1.4) release of Skype. Legitimate downloads of the software only came out last week, so the attack is timely. If users open the infected payload on a vulnerable Windows machine they will find their PCs transformed into zombie clients (theoretically at least) under the control of computer hackers.

Don’t trust patches or software distributed via email. That’s all there is to it.