MySpace Scams

We have come to find out that this profile watcher is still on the loose. Do not use any profile watchers or trackers. All they will do is steal you MySpace login information and put a virus or spyware onto your computer. The safest bet is to not add untrusted code to your myspace page. You never know who will try to abuse it.

If you have already downloaded and installed the Profile Watcher, you need to remove it immediately and then change your myspace password.

If you are having trouble removing it then try using a spyware solution or antivirus to run a scan for the remaining program.

Technical Information:
1. COVERT ANALYSIS OF: Profile Watcher

* File Names Used: 8
* Paths Used: 6
* Common File Name: MUBILY08.EXE
* Common Path: %CACHE%\CONTENT.IE5\????????\
* Vendor Information: ZeroPoint Search Solutions
* MUBILY08.EXE may use 8 or more path and file names, these are the most common:
* 1 :%DOCUMENTS%\PORN\PROFILEWATCHER_SETUP.EXE
* 2 :%DOCUMENTS%\PROFILEWATCHER_SETUP.EXE
* 3 :%DOCUMENTS%\PROGRAM DOWNLOADS\PROFILEWATCHER_SETUP.EXE
* 4 :%TEMP%\18ZO19OF.EXE
* 5 :%TEMP%\MUBILY08.EXE
* 6 :%TEMP%\QF0XP27P.EXE
* 7 :%TEMP%\YEGN7HV1.EXE
* 8 :?:\TEMP\6GBWBF4O.EXE
* File Name Structure: Common
* File and Path Structure: Suspicious, code execution from unusual location

2. RELATIONSHIP ANALYSIS OF: Profile Watcher

* No relationship details available for this object

3. ACTIVITY ANALYSIS OF: Profile Watcher

* The following behaviors have been observed for this object:
* Runs temporary programs.
* Runs other programs.