Browser Helper Object Archive

Browser Helper Object: Atfxqogp Toolbar

May 26th, 2008, by Chris, at 411 Spyware | Posted in Atfxqogp Tool bar, AtfxqogpToolbar, Browser Helper Object, Browser Hijackers, Rogue Anti Spyware

Atfxqogp Toolbar Threat Level: Atfxqogp Toolbar is a Pest

Atfxqogp Toolbar Atfxqogp Toolbar is another toolbar by Trojan Zlob, designed to trick you into buying fake anti-spyware. Atfxqogp Toolbar is a clone of Gktxaspm Toolbar(which is a clone of Pvnsmfor Toolbar. Which is a clone of Mkrndofl Toolbar. See a pattern?)

To rip you off, Atfxqogp Toolbar launches annoying popus, hijacks your home page, and hopes you’ll click Atfxqogp Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Atfxqogp Toolbar isn’t about being easy on its “customers.”

If you have Atfxqogp Toolbar, your search results might be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re infected with is the Atfxqogp Toolbar. Unless you like wasting money, don’t buy whatever Atfxqogp Toolbar is selling.

Read more about Atfxqogp Toolbar »


Browser Helper Object: ProtectStartPage.com

May 21st, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Protect Start Page com, ProtectStartPage.com, Rogue Anti Spyware

ProtectStartPage.com Threat Level: ProtectStartPage.com is a pest

ProtectStartPage.com screenshotProtectStartPage.com is a browser hijacker that changes your home page to ProtectStartPage.com. Like its twin PureSafetyHere.com, ProtectStartPage.com pimps fake anti-spyware, like AntiSpyware Shield and WinSpyKiller. ProtectStartPage.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This ProtectStartPage.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with ProtectStartPage.com. And the only thing ProtectStartPage.com and its rogue anti-spyware removes is money from your pockets.

So remove ProtectStartPage.com.

Read more about ProtectStartPage.com »


Browser Helper Object: Gktxaspm Toolbar

May 20th, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Gktxaspm Tool bar, GktxaspmToolbar, Rogue Anti Spyware

Gktxaspm Toolbar Threat Level: Gktxaspm Toolbar is a Pest

Gktxaspm Toolbar Gktxaspm Toolbar is the latest toolbar by Zlob Trojan, designed to trick you into buying fake anti-spyware. To scam you, Gktxaspm Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Gktxaspm Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Gktxaspm Toolbar isn’t very marketing savvy.

If you have Gktxaspm Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Gktxaspm Toolbar. Unless you like wasting money, don’t buy the software Gktxaspm Toolbar is pimping.

Read more about Gktxaspm Toolbar »


Browser Helper Object: Pvnsmfor Toolbar

May 12th, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Pvnsmfor Tool bar, PvnsmforToolbar, Rogue Anti Spyware

Pvnsmfor Toolbar Threat Level: Pvnsmfor Toolbar is a Pest

Pvnsmfor Toolbar Pvnsmfor Toolbar is another toolbar by Trojan Zlob, created to scare you into buying fake anti-spyware To scam you, Pvnsmfor Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Pvnsmfor Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Pvnsmfor Toolbar isn’t very marketing savvy.

If you have Pvnsmfor Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Pvnsmfor Toolbar. Unless you like wasting money, don’t buy Pvnsmfor Toolbar or the products it’s pimping.

Read more about Pvnsmfor Toolbar »


Browser Helper Object: WinSecurity Toolbar 2.1

May 8th, 2008, by Chris, at 411 Spyware | Posted in Adware, Browser Helper Object, Rogue Anti Spyware, Win Security Toolbar 2.1, WinSecurity Toolbar 2.1, WinSecurity Toolbar2 1, WinSecurityToolbar 2.1, WinSecurityToolbar2.1

WinSecurity Toolbar 2.1 Threat Level: WinSecurity Toolbar 2.1 is a Threat

WinSecurity Toolbar 2.1 is a Zlob.Trojan/Trojan Zlob toolbar that watches your web activity, sends this information back to its parent, and serves you popups and link ads. WinSecurity Toolbar 2.1 may also hijack your web pages, block your URL requests, and download more pests onto your computer. Signs of WinSecurity Toolbar 2.1 include wanting to throw your computer out of the window, a little yellow triangle with an exclamation mark (!) in the bottom right corner of your screen, and tons of bad porn downloaded onto your desktop.

Wait. There’s more.

During WinSecurity Toolbar 2.1’s limited-time offering, you’ll also have a difficult time manually removing WinSecurity Toolbar 2.1, as the adware toolbar will often regenerate.

Read more about WinSecurity Toolbar 2.1 »


Browser Helper Object: Mkrndofl Toolbar

May 4th, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Mkrndofl Tool bar, MkrndoflToolbar, Rogue Anti Spyware, mkrndofl dll), mkrndofl.dll

Mkrndofl Toolbar Threat Level: Mkrndofl Toolbar is a Pest

Mkrndofl Toolbar Mkrndofl Toolbar is another Zlob.Trojan/Trojan Zlob toolbar, created to trick you into buying rogue anti-spyware. To sell fake anti-spyware, Mkrndofl Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Mkrndofl Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.” If you have Mkrndofl Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Mkrndofl Toolbar. Unless you like wasting money, don’t buy Mkrndofl Toolbar or the products it’s pimping.

Read more about Mkrndofl Toolbar »


Browser Helper Object: Wxdbpfvo Toolbar

April 28th, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware, Wxdbpfvo Tool bar, WxdbpfvoToolbar

Wxdbpfvo Toolbar Threat Level: Wxdbpfvo Toolbar is a Pest

Wxdbpfvo Toolbar Wxdbpfvo Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Wxdbpfvo Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Wxdbpfvo Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Wxdbpfvo Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Wxdbpfvo Toolbar. Unless you like getting ripped off, don’t buy Wxdbpfvo Toolbar or the products it’s pimping.

Read more about Wxdbpfvo Toolbar »


Browser Helper Object: Qtvglped Toolbar

April 21st, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Qtvglped Tool bar, QtvglpedToolbar, Rogue Anti Spyware

Qtvglped Toolbar Threat Level: Qtvglped Toolbar is a Pest

Qtvglped Toolbar Qtvglped Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Qtvglped Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Qtvglped Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Qtvglped Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Qtvglped Toolbar. Unless you like getting ripped off, don’t buy Qtvglped Toolbar or the products it’s pimping.

Read more about Qtvglped Toolbar »


Browser Helper Object: Dpevflbg Toolbar

April 21st, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Dpevflbg Tool bar, DpevflbgToolbar, Rogue Anti Spyware

Dpevflbg Toolbar Threat Level: Dpevflbg Toolbar is a Pest

Dpevflbg Toolbar Dpevflbg Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, designed to pimp rogue anti-spyware. To promote fake anti-spyware, Dpevflbg Toolbar will popup annoying ads, hijack your home page, and hope you’ll click Dpevflbg Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Dpevflbg Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning! The only thing you’re really infected with is Dpevflbg Toolbar. Unless you like getting ripped off, don’t buy Dpevflbg Toolbar or the products it’s pimping.

Read more about Dpevflbg Toolbar »


Browser Helper Object: Sgoblxtm Toolbar

April 14th, 2008, by Chris, at 411 Spyware | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware

Sgoblxtm Toolbar Threat Level: Sgoblxtm Toolbar is a Pest

Sgoblxtm Toolbar Sgoblxtm Toolbar is just the latest Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Sgoblxtm Toolbar might pimp fake anti-spyware with annoying popups, hijacking your home page, and Sgoblxtm Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Sgoblxtm Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

The only thing you’re infected with is Sgoblxtm Toolbar. Unless you like getting ripped off, don’t buy Sgoblxtm Toolbar or the products it’s pimping.

Read more about Sgoblxtm Toolbar »