A worm that installs a ‘Safety Browser’ and plays screeching music is circulating via IM. The annoyance starts with a link apparently sent by a friend in Yahoo’s IM program. IM security company FaceTime Communications described the malware, which it calls “yhoo32.explr”, The malware infects the PC with two elements. The first element is a

Sunbelt reported about new CWS site – Coolwebsearch.info. This site is an affiliate of Coolwebsearch.com that installs a toolbar which hijacks the home page without a EULA. Run by our Best Friend Ever, Vadmim Praha Whois Data: Fedorov Vadim Praha CZ hali @ volny.cz Fedorov Vadim Praha CZ sp @ prague-sex.com Fedorov Vadim Prtaha 5

HOSTS file hijacking combined with bank password stealing trojans is one of the more egregious spyware tricks currently being seen. Here’s the scenario. A user is infected with a trojan and other malware that, among other things, changes the HOSTS file so that websites commonly used for online banking are redirected to the spyware pusher/thief’s