It's still around in 2012, apparently riding on an infected UK web site. The current version overrides Run for any security program and pops up its own "security" program, except in safe mode. It...