Data security organisation admits sending virus to subscribers