411 on Spyware » BHOs http://www.411-spyware.com 411-Spyware.com Fri, 20 Nov 2009 02:05:11 +0000 http://wordpress.org/?v=2.8.5 en hourly 1 Adware.MediaBack http://www.411-spyware.com/remove-adware-mediaback http://www.411-spyware.com/remove-adware-mediaback#comments Fri, 22 May 2009 20:59:35 +0000 Kristopher http://www.411-spyware.com/?p=4624 Adware.MediaBack is a BHO, or a "browser helper object." What does Adware.MediaBack help your browser to? Some popups, homepage hijacking, and search redirects. How considerate. Not all BHOs are badware, but since Adware.MediaBack is a BHO, MediaBack starts up with your browser. And since your system sees it as a part of your browser, Adware.MediaBack can be hard to detect. Meanwhile, Adware.MediaBack may watch you surf the web, and tailor waves of ads accordingly. Adware.MediaBack popups driving you bananas? Before you set fire to your PC, I'll show you how to uninstall Adware.MediaBack. ]]> http://www.411-spyware.com/remove-adware-mediaback/feed 0 Timbar http://www.411-spyware.com/remove-timbar http://www.411-spyware.com/remove-timbar#comments Tue, 12 May 2009 17:36:53 +0000 Kristopher http://www.411-spyware.com/?p=4525 Timbar is a BHO, or a "browser help object." What does Timbar do? Timbar helps your Internet Explorer browser to some popups. Like other BHOs, Timbar starts up with your browser, and, because your system sees it as a part of your browser, Timbar can be hard to detect. Meanwhile, Timbar may watch your web surfing, and tailor Timbar pop-up ads accordingly. Timbar popups driving you bananas? Before you set fire to your PC, I'll show you how to remove Timbar popups, for free. ]]> http://www.411-spyware.com/remove-timbar/feed 0 SmartEnhancer http://www.411-spyware.com/smartenhancer-removal http://www.411-spyware.com/smartenhancer-removal#comments Sun, 22 Mar 2009 18:39:46 +0000 Kristopher http://www.411-spyware.com/?p=4041 SmartEnhancer is a browser helper that swears it'll speed up your web surfing. Fabulous. Only whatever boost you get from SmartEnhancer could be offset by the drag of SmartEnhancer popups that keep prompting you to pay for SmartEnhancer. Before SmartEnhancer drives you bananas with SmartEnhancer ads, I'll show you how to get rid of SmartEnhancer, for free.]]> http://www.411-spyware.com/smartenhancer-removal/feed 1 Internet Speed Monitor http://www.411-spyware.com/internet-speed-monitor http://www.411-spyware.com/internet-speed-monitor#comments Fri, 06 Feb 2009 06:27:47 +0000 Kristopher http://www.411-spyware.com/?p=2695 Internet Speed Monitor is a browser sidebar installed by adware AdBand. Internet Speed Monitor tags "Internet Speed Monitor" across the top of your browser sidebar, and slaps "Ads by ISM and not from the website you are visiting" at the bottom. Thanks for the clarification, Internet Speed Monitor. Before Internet Speed Monitor drives you bananas with Internet Speed Monitor popups, I'll show you how to get rid of Internet Speed Monitor, for free.]]> http://www.411-spyware.com/internet-speed-monitor/feed 0 Radz Services and Internet Cafe http://www.411-spyware.com/radz-services-and-internet-cafe http://www.411-spyware.com/radz-services-and-internet-cafe#comments Sun, 16 Nov 2008 21:00:32 +0000 Kristopher http://www.411-spyware.com/?p=2788 Radz Services and Internet Cafe Threat Level: Radz Services and Internet Cafe is a Threat Radz Services and Internet Cafe screenshot Radz Services and Internet Cafe is a browser hijacker that redirects Internet Explorer to RadzServices.blogspot.com, and changes your IE title to "Radz Services and Internet Cafe." Before Radz Services and Internet Cafe makes you throw your PC into a bubble bath, I'll show you how to remove Radz Services and Internet Cafe for free, and block RadzServices.blogspot.com.]]> http://www.411-spyware.com/radz-services-and-internet-cafe/feed 1 Rosqxvmn Toolbar http://www.411-spyware.com/rosqxvmn-toolbar http://www.411-spyware.com/rosqxvmn-toolbar#comments Fri, 24 Oct 2008 06:06:14 +0000 Kristopher http://www.411-spyware.com/?p=2531 Rosqxvmn Toolbar Threat Level: Rosqxvmn Toolbar is a Pest Rosqxvmn Toolbar Rosqxvmn Toolbar is the latest toolbar by everyone's favorite Trojan, Zlob. Rosqxvmn Toolbar was created to scare you into buying fake anti-spyware. To scam you, Rosqxvmn Toolbar pops up annoying ads, hijacks your home page, and hopes you'll click Rosqxvmn Toolbar's buttons or Rosqxvmn Toolbar popups for "Remove Popups, Scan Spyware, Security Test, and Spam Protection." Obviously, its impossible-to-pronounce name makes it clear -- Rosqxvmn Toolbar isn't exactly about pleasing its customers. If you have Rosqxvmn Toolbar, your search results could be topped with this fake alert:
"Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…"
Warning: the only thing you're really infected with is Rosqxvmn Toolbar. Unless you like wasting money, don't buy Rosqxvmn Toolbar or the products it's pimping.]]> http://www.411-spyware.com/rosqxvmn-toolbar/feed 0 Win32/Xema.A http://www.411-spyware.com/win32-xema-a http://www.411-spyware.com/win32-xema-a#comments Tue, 21 Oct 2008 16:07:08 +0000 Roselle http://www.411-spyware.com/?p=2394 Win32/Xema.AThreat Level: Win32/Xema.A is a Medium Threat Win32/Xema.A , AKA Troj/Agent-FXF, Backdoor.Win32.Agobot.h, is a trojan that drops a worm with backdoor characteristics into your system. The worm will spread through removable drives through their autorun function. Win32/Xema.A steals private information such as your computer name, IP address, and operating system info, and, by launching IE in the background, reports these details to remote servers at 11.36.299.234 and/or http://httpdocs. From this hive, Win32/Xema.A then accepts download instructions to install more malware into your PC. Win32/Xema.A also modifies the registry to hide system files, making it very difficult to detect and remove - but not impossible. We'll show you how to get rid of Win32/Xema.A for free.]]> http://www.411-spyware.com/win32-xema-a/feed 0 Homepageroze.com http://www.411-spyware.com/homepageroze-com http://www.411-spyware.com/homepageroze-com#comments Mon, 20 Oct 2008 03:35:30 +0000 Roselle http://www.411-spyware.com/?p=2387 Homepageroze.com Threat Level: Homepageroze.com is a Pest Homepageroze.com screenshotHomepageroze.com is another browser hijacker that tries to peddle rogue antispyware to the unsuspecting user. Homepageroze.com also comes in Homepageroze.com/security/xp/ and Homepageroze.com/security/vista/ flavors. Unlike a nice scoop of B&R ice cream, these rogues are sure to leave an ugly taste in your mouth - when you are peacefully browsing the web, and out of nowhere, this popup warning jumps in your face:
"The page at http://www.Homepageroze.com says: Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer. Type: Virus Infection Length: 138,293 bytes Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs) Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows. 2. Adds values to registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 3. Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker. Recomendations: Click "OK" to download officially approved security software. Always keep your patch levels up-to-date.
Better yet: hit Alt-F4 to close the browser window without clicking on anything, and see how easy it is to get rid of Homepageroze.com for free.]]> http://www.411-spyware.com/homepageroze-com/feed 0 Cybersitter 10.0 http://www.411-spyware.com/cybersitter-10-0 http://www.411-spyware.com/cybersitter-10-0#comments Mon, 20 Oct 2008 02:56:53 +0000 Roselle http://www.411-spyware.com/?p=2382 Cybersitter 10.0Threat Level: Cybersitter 10.0 is a Danger Cybersitter 10.0 screenshotCybersitter 10.0 , also referenced as Adware.Win32.CyberSitter 10.0, has been reported as rogue antispyware and trojan. We found numerous research references for Cybersitter 10.0, and our conclusion is that Cybersitter 10.0 is a "Parental Control" app and best labelled as keylogger. Cybersitter 10.0 is installed on your PC via an executable file download. We have not been able to identify any trojans that would download and/or install this Cybersitter 10.0 program in the background. Cybersitter 10.0 has been the subject of many frustrated user complaints, including this C-net forum entry:
I downloaded this software into my son's computer about 1 year ago. It has basically destroyed his hard drive. I cannot delete it (even with my password which they have NOW changed apparently?). I have called this company twice...I have emailed. My last step was I filed a oomplaint to the BBB. I won't say what my next step is. I have tried everything to remove this from his computer. We are now in the process of buying a new harddrive because there is nothing else left. If you go to cybersitter there are TONS of complaints regarding this software. Oddly enough, they do not respond from the company to you. If anyone here (since CNET suggests this software) has any suggestions. All help would be appreciated. One word of advice, if you do not have Cybersitter, DO NOT DOWNLOAD THIS onto your oomputer. To say its been a nightmare, is mile. Yzgi
Apparently, Cybersitter 10.0 cannot be uninstalled through Control Panel, and once Cybersitter 10.0 is in your system, the only way to get rid of Cybersitter 10.0 is through its own command interface - unless you follow the free Cybersitter 10.0 removal instructions below.]]> http://www.411-spyware.com/cybersitter-10-0/feed 1 Fqbewlna Toolbar http://www.411-spyware.com/remove-fqbewlna-toolbar http://www.411-spyware.com/remove-fqbewlna-toolbar#comments Mon, 29 Sep 2008 02:29:48 +0000 Kristopher http://www.411-spyware.com/?p=1397 Fqbewlna Toolbar Threat Level: Fqbewlna Toolbar is a Pest Fqbewlna Toolbar Fqbewlna Toolbar is the latest toolbar by everyone's favorite Trojan, Zlob. Fqbewlna Toolbar was created to scare you into buying fake anti-spyware. To scam you, Fqbewlna Toolbar pops up annoying ads, hijacks your home page, and hopes you'll click Fqbewlna Toolbar's buttons for "Remove Popups, Scan Spyware, Security Test, and Spam Protection." Obviously, its impossible-to-pronounce name makes it clear -- Fqbewlna Toolbar isn't exactly about pleasing its customers. If you have Fqbewlna Toolbar, your search results could be topped with this fake alert:
Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware!
Warning: the only thing you're really infected with is Fqbewlna Toolbar. Unless you like wasting money, don't buy Fqbewlna Toolbar or the products it's pimping.]]> http://www.411-spyware.com/remove-fqbewlna-toolbar/feed 0