Browser Helper Object Archive

Browser Helper Object: Sgoblxtm Toolbar

April 14th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware

Sgoblxtm Toolbar Threat Level: Sgoblxtm Toolbar is a Pest

Sgoblxtm Toolbar Sgoblxtm Toolbar is just the latest Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Sgoblxtm Toolbar might pimp fake anti-spyware with annoying popups, hijacking your home page, and Sgoblxtm Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Sgoblxtm Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

The only thing you’re infected with is Sgoblxtm Toolbar. Unless you like getting ripped off, don’t buy Sgoblxtm Toolbar or the products it’s pimping.

Read more about Sgoblxtm Toolbar »


Browser Helper Object: Vnbptxlf Toolbar

April 5th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware, Vnbptxlf Tool bar

Vnbptxlf Toolbar Threat Level: Vnbptxlf Toolbar is a Pest

Vnbptxlf Toolbar Vnbptxlf Toolbar is just another Zlob.Trojan/Trojan Zlob toolbar clone, designed to pimp rogue anti-spyware. Vnbptxlf Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Vnbptxlf Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Vnbptxlf Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Vnbptxlf Toolbar or the products it’s pimping.

Read more about Vnbptxlf Toolbar »


Browser Helper Object: Stfngdvw Toolbar

March 30th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Browser Plugins, Rogue Anti Spyware, Stfngdvw Tool bar, StfngdvwToolbar

Stfngdvw Toolbar Threat Level: Stfngdvw Toolbar is a Pest

Stfngdvw Toolbar Stfngdvw Toolbar is yet another Zlob.Trojan/Trojan Zlob toolbar clone, designed to pimp rogue anti-spyware. Stfngdvw Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Stfngdvw Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” If you have Stfngdvw Toolbar, your search results could be topped with this scam message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Stfngdvw Toolbar or the products it’s pimping.

Read more about Stfngdvw Toolbar »


Browser Helper Object: SafetyAlertings.com

March 21st, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware, Safety Alertings com, SafetyAlerting com, SafetyAlertings.com

SafetyAlertings.com Threat Level: SafetyAlertings.com is a pest

SafetyAlertings.com screenshotSafetyAlertings.com is a browser hijacker that makes your homepage SafetyAlertings.com. Like its twin PureSafetyHere.com, SafetyAlertings.com pimps fake anti-spyware, such as WinSpyKiller and AntiSpyware Shield. SafetyAlertings.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafetyAlertings.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafetyAlertings.com. And the only thing SafetyAlertings.com and its rogue anti-spyware removes is money from your pockets.

So remove SafetyAlertings.com.

Read more about SafetyAlertings.com »


Browser Helper Object: SecurityPills.com

March 20th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware, Security Pills com, SecurityPill com

SecurityPills.com Threat Level: SecurityPills.com is a pest

SecurityPills.com screenshotSecurityPills.com is a browser hijacker that redirects your home page to SecurityPills.com. Like PureSafetyHere.com – and SecureInvites.com, and PageforSafety.com – , which SecurityPills.com is a clone of, SecurityPills.com pimps rogue anti-spyware, such as AntiSpyware Shield and WinSpyKiller. SecurityPills.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SecurityPills.com popup reads:
Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software. Always keep your patch levels up-to-date.

If you click “OK” you’re taken to MalwareCore.com to waste money on fake anti-spyware.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SecurityPills.com. And the only thing SecurityPills.com and its rogue anti-spyware removes is money from your pockets.

So remove SecurityPills.com.

Read more about SecurityPills.com »


Browser Helper Object: X-Max.net

March 17th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, XMax net, Zlob trojan

X-Max.net Threat Level: X-Max.net is a Pest

X-Max.net is another Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. X-Max.net might sell fake anti-spyware with annoying popups or fake security scans. X-Max.net may also hijack your Google and Yahoo searches and replace them with “sponsored” links to adult or gambling content.

If you wanted that, you’d just hit YouPorn.com, right? So delete X-Max.net.

Read more about X-Max.net »


Browser Helper Object: SecurityToolbar

March 14th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Rogue Anti Spyware, Security Tool bar, Security Toolbar

SecurityToolbar Threat Level: SecurityToolbar is a Pest

SecurityToolbar SecurityToolbar is another Zlob.Trojan/Trojan Zlob toolbar clone, created to pimp rogue anti-spyware. SecurityToolbar might sell fake anti-spyware with popups, a home page hijack, and SecurityToolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have SecurityToolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy SecurityToolbar or the products it’s pimping.

Read more about SecurityToolbar »


Browser Helper Object: Etlrlws Toolbar

March 10th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Etlrlws Tool bar, EtlrlwsToolbar, Rogue Anti Spyware

Etlrlws Toolbar Threat Level: Etlrlws Toolbar is a Pest

Etlrlws Toolbar Etlrlws Toolbar is another Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Etlrlws Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Etlrlws Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have Etlrlws Toolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Etlrlws Toolbar or the products it’s pimping.

Read more about Etlrlws Toolbar »


Browser Helper Object: Enlfxgw Toolbar

March 7th, 2008, by Kristopher | Posted in Browser Helper Object, Browser Hijackers, Enlfxgw Tool bar, EnlfxgwToolbar, Rogue Anti Spyware

Enlfxgw Toolbar Threat Level: Enlfxgw Toolbar is a Pest

Enlfxgw Toolbar Enlfxgw Toolbar is another clone of a Zlob.Trojan/Trojan Zlob toolbar, which is designed to sell rogue anti-spyware. Enlfxgw Toolbar might sell fake anti-spyware by hijacking your home page, annoying popups, and Enlfxgw Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have Enlfxgw Toolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting scammed, don’t buy Enlfxgw Toolbar or the products it’s pimping.

Read more about Enlfxgw Toolbar »


Browser Helper Object: AdGoblin

February 28th, 2008, by Kristopher | Posted in Ad Goblin, AdGobln, AdGolbin, Adware, Browser Helper Object

AdGoblin Threat Level: AdGoblin is a Pest

AdGoblin is adware that installs itself as a browser helper object (BHO), and pops up enough annoying ads on Internet Explorer that AdGoblin might even make your browser unusable. You could try removing AdGoblin through the usual remove/uninstall applications. And if that doesn’t work?

Throw your PC out the window.

Read more about AdGoblin »