ProtectStartPage.com Threat Level:

ProtectStartPage.com is a browser hijacker that changes your home page to ProtectStartPage.com. Like its twin PureSafetyHere.com, ProtectStartPage.com pimps fake anti-spyware, like AntiSpyware Shield and WinSpyKiller. ProtectStartPage.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This ProtectStartPage.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with ProtectStartPage.com. And the only thing ProtectStartPage.com and its rogue anti-spyware removes is money from your pockets.

So remove ProtectStartPage.com.

Keep reading »

Gktxaspm Toolbar Threat Level:

Gktxaspm Toolbar is the latest toolbar by Zlob Trojan, designed to trick you into buying fake anti-spyware. To scam you, Gktxaspm Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Gktxaspm Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Gktxaspm Toolbar isn’t very marketing savvy.

If you have Gktxaspm Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Gktxaspm Toolbar. Unless you like wasting money, don’t buy the software Gktxaspm Toolbar is pimping.

Keep reading »

Pvnsmfor Toolbar Threat Level:

Pvnsmfor Toolbar is another toolbar by Trojan Zlob, created to scare you into buying fake anti-spyware To scam you, Pvnsmfor Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Pvnsmfor Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Pvnsmfor Toolbar isn’t very marketing savvy.

If you have Pvnsmfor Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Pvnsmfor Toolbar. Unless you like wasting money, don’t buy Pvnsmfor Toolbar or the products it’s pimping.

Keep reading »

WinSecurity Toolbar 2.1 Threat Level:

WinSecurity Toolbar 2.1 is a Zlob.Trojan/Trojan Zlob toolbar that watches your web activity, sends this information back to its parent, and serves you popups and link ads. WinSecurity Toolbar 2.1 may also hijack your web pages, block your URL requests, and download more pests onto your computer. Signs of WinSecurity Toolbar 2.1 include wanting to throw your computer out of the window, a little yellow triangle with an exclamation mark (!) in the bottom right corner of your screen, and tons of bad porn downloaded onto your desktop.

Wait. There’s more.

During WinSecurity Toolbar 2.1’s limited-time offering, you’ll also have a difficult time manually removing WinSecurity Toolbar 2.1, as the adware toolbar will often regenerate.

Keep reading »

Mkrndofl Toolbar Threat Level:

Mkrndofl Toolbar is another Zlob.Trojan/Trojan Zlob toolbar, created to trick you into buying rogue anti-spyware. To sell fake anti-spyware, Mkrndofl Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Mkrndofl Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.” If you have Mkrndofl Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Mkrndofl Toolbar. Unless you like wasting money, don’t buy Mkrndofl Toolbar or the products it’s pimping.

Keep reading »

Wxdbpfvo Toolbar Threat Level:

Wxdbpfvo Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Wxdbpfvo Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Wxdbpfvo Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Wxdbpfvo Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Wxdbpfvo Toolbar. Unless you like getting ripped off, don’t buy Wxdbpfvo Toolbar or the products it’s pimping.

Keep reading »

Qtvglped Toolbar Threat Level:

Qtvglped Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, created to sell rogue anti-spyware. To pimp fake anti-spyware, Qtvglped Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Qtvglped Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Qtvglped Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Qtvglped Toolbar. Unless you like getting ripped off, don’t buy Qtvglped Toolbar or the products it’s pimping.

Keep reading »

Dpevflbg Toolbar Threat Level:

Dpevflbg Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar, designed to pimp rogue anti-spyware. To promote fake anti-spyware, Dpevflbg Toolbar will popup annoying ads, hijack your home page, and hope you’ll click Dpevflbg Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Dpevflbg Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning! The only thing you’re really infected with is Dpevflbg Toolbar. Unless you like getting ripped off, don’t buy Dpevflbg Toolbar or the products it’s pimping.

Keep reading »

Sgoblxtm Toolbar Threat Level:

Sgoblxtm Toolbar is just the latest Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Sgoblxtm Toolbar might pimp fake anti-spyware with annoying popups, hijacking your home page, and Sgoblxtm Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Sgoblxtm Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

The only thing you’re infected with is Sgoblxtm Toolbar. Unless you like getting ripped off, don’t buy Sgoblxtm Toolbar or the products it’s pimping.

Keep reading »

Vnbptxlf Toolbar Threat Level:

Vnbptxlf Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar clone, designed to pimp rogue anti-spyware. Vnbptxlf Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Vnbptxlf Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Vnbptxlf Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Vnbptxlf Toolbar or the products it’s pimping.

Keep reading »