What are Osama Capture, BuddyLinks, Run Saddam Run, and PSD Tools, and how can I remove them?

Warning: To avoid viruses spread via instant messaging (IM), think before you click; if you receive a message out of the blue, with nothing more than a link and/or general text, do not click it. For more information, see If I use instant messaging software, how can I keep my computer secure?

BuddyLinks, aka Osama Capture and Run, Saddam, Run!, is a program by a company named PSDTools LLC. It is not, strictly speaking, a virus or Trojan, but is more accurately described as spyware or adware.

The program uses your instant messaging program (usually AOL Instant Messenger) to send links to the people on your buddy list. These links prompt the recipients to install BuddyLinks onto their computers.

Since the program can repeatedly send out these download links, it can be very disruptive to the people on your buddy list.

Removing BuddyLinks from your computer

Symantec has classified BuddyLinks as an Expanded Threat, and has posted instructions on how to remove the program from your computer on the Symantec Security Response web site at:

Note: In order to prevent the spread of BuddyLinks, as well as other adware, viruses, worms, and Trojans, it is important to be careful when clicking links sent over AOL Instant Messenger or found in AOL Profiles. Always check with the sender to make sure he or she intended to send you the link.

Comments/Questions/Corrections