WinSecurity Toolbar 2.1 Threat Level:

WinSecurity Toolbar 2.1 is a Zlob.Trojan/Trojan Zlob toolbar that watches your web activity, sends this information back to its parent, and serves you popups and link ads. WinSecurity Toolbar 2.1 may also hijack your web pages, block your URL requests, and download more pests onto your computer. Signs of WinSecurity Toolbar 2.1 include wanting to throw your computer out of the window, a little yellow triangle with an exclamation mark (!) in the bottom right corner of your screen, and tons of bad porn downloaded onto your desktop.

Wait. There’s more.

During WinSecurity Toolbar 2.1’s limited-time offering, you’ll also have a difficult time manually removing WinSecurity Toolbar 2.1, as the adware toolbar will often regenerate.

Read more about WinSecurity Toolbar 2.1 »

Mkrndofl Toolbar Threat Level:

Mkrndofl Toolbar is another Zlob.Trojan/Trojan Zlob toolbar, created to trick you into buying rogue anti-spyware. To sell fake anti-spyware, Mkrndofl Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Mkrndofl Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.” If you have Mkrndofl Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Mkrndofl Toolbar. Unless you like wasting money, don’t buy Mkrndofl Toolbar or the products it’s pimping.

Read more about Mkrndofl Toolbar »

Wxdbpfvo Toolbar Threat Level:

Wxdbpfvo Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Wxdbpfvo Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Wxdbpfvo Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Wxdbpfvo Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Wxdbpfvo Toolbar. Unless you like getting ripped off, don’t buy Wxdbpfvo Toolbar or the products it’s pimping.

Read more about Wxdbpfvo Toolbar »

Qtvglped Toolbar Threat Level:

Qtvglped Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Qtvglped Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Qtvglped Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Qtvglped Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Qtvglped Toolbar. Unless you like getting ripped off, don’t buy Qtvglped Toolbar or the products it’s pimping.

Read more about Qtvglped Toolbar »

Dpevflbg Toolbar Threat Level:

Dpevflbg Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, designed to pimp rogue anti-spyware. To promote fake anti-spyware, Dpevflbg Toolbar will popup annoying ads, hijack your home page, and hope you’ll click Dpevflbg Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Dpevflbg Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning! The only thing you’re really infected with is Dpevflbg Toolbar. Unless you like getting ripped off, don’t buy Dpevflbg Toolbar or the products it’s pimping.

Read more about Dpevflbg Toolbar »

Sgoblxtm Toolbar Threat Level:

Sgoblxtm Toolbar is just the latest Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Sgoblxtm Toolbar might pimp fake anti-spyware with annoying popups, hijacking your home page, and Sgoblxtm Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Sgoblxtm Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

The only thing you’re infected with is Sgoblxtm Toolbar. Unless you like getting ripped off, don’t buy Sgoblxtm Toolbar or the products it’s pimping.

Read more about Sgoblxtm Toolbar »

Vnbptxlf Toolbar Threat Level:

Vnbptxlf Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar clone, designed to pimp rogue anti-spyware. Vnbptxlf Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Vnbptxlf Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Vnbptxlf Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Vnbptxlf Toolbar or the products it’s pimping.

Read more about Vnbptxlf Toolbar »

Stfngdvw Toolbar Threat Level:

Stfngdvw Toolbar is yet another Zlob.Trojan/Trojan Zlob toolbar clone, designed to pimp rogue anti-spyware. Stfngdvw Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Stfngdvw Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Stfngdvw Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Stfngdvw Toolbar or the products it’s pimping.

Read more about Stfngdvw Toolbar »

SafetyAlertings.com Threat Level:

SafetyAlertings.com is a browser hijacker that makes your homepage SafetyAlertings.com. Like its twin PureSafetyHere.com, SafetyAlertings.com pimps fake anti-spyware, such as WinSpyKiller and AntiSpyware Shield. SafetyAlertings.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafetyAlertings.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafetyAlertings.com. And the only thing SafetyAlertings.com and its rogue anti-spyware removes is money from your pockets.

So remove SafetyAlertings.com.

Read more about SafetyAlertings.com »

SecurityPills.com Threat Level:

SecurityPills.com is a browser hijacker that redirects your home page to SecurityPills.com. Like PureSafetyHere.com – and SecureInvites.com, and PageforSafety.com – , which SecurityPills.com is a clone of, SecurityPills.com pimps rogue anti-spyware, such as AntiSpyware Shield and WinSpyKiller. SecurityPills.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SecurityPills.com popup reads:
Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software. Always keep your patch levels up-to-date.
If you click “OK” you’re taken to MalwareCore.com to waste money on fake anti-spyware.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SecurityPills.com. And the only thing SecurityPills.com and its rogue anti-spyware removes is money from your pockets.

So remove SecurityPills.com.

Read more about SecurityPills.com »