We have identified and logged a new rogue security program: WebSpyShield.
According to Sunbelt employee Patrick Jordan:
It installs a toolbar and an exe in a webspyshield folder however, it is a fake web based scam. You have to be connected for it to run and I would hate to think what anyone may pay for to register it as it is no real software but only a new form of their online scanner scams.
More information available here:
Recently there has been a worm going around rapidly, and it spreads via USB drives.
If you find the following messages on your computer, you may have been infected.
1.“I DNT HATE MOZILLA BUT USE IE OR ELSE…” when you launch Firefox
2.”ORKUT IS BANNED, Orkut is banned you fool`, The administrators didn’t write this program guess who did?? ” when you try to launch Orkut
3. “youtube IS BANNED,youtube is banned you fool`, The administrators didn’t write this program guess who did??`r`r MUHAHAHA!!,30″
We have, of course, updated the ParasiteDB database to reflect this worm. More details available here: