RapidShare used to spread rogueware Besides the usual spam this morning, in the likes of " very good news . now you can buy new iphone 4 from this site! ", I had also received an email from someone I know. It was sent to all of his contacts, including me. The message only contained the following URL: Link to Rapidshare to download a file called "surprise.exe" I have obfuscated the URL for your safety. It comes to no surprise that actually this file is rogueware with the name Security Shield. Below you can find an example screenshot of this rogue: Security Shield rogueware surprise.exe Result: 11 /42 (26.2%) MD5: a6af97e7a5fd59c82b4c08a568eae882 VirusTotal Anubis Report ThreatExpert Report When executing the downloaded file ( surprise.exe ): Conclusion Besides coming from a trusted person, this rogueware program is also using Rapidshare as a mirror for spreading. Also, the file has the name "surprise.exe" which may convince you even further that your fri...