SafetyAlertings.com Threat Level:

SafetyAlertings.com is a browser hijacker that makes your homepage SafetyAlertings.com. Like its twin PureSafetyHere.com, SafetyAlertings.com pimps fake anti-spyware, such as WinSpyKiller and AntiSpyware Shield. SafetyAlertings.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafetyAlertings.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafetyAlertings.com. And the only thing SafetyAlertings.com and its rogue anti-spyware removes is money from your pockets.

So remove SafetyAlertings.com.

Keep reading »

SecurityPills.com Threat Level:

SecurityPills.com is a browser hijacker that redirects your home page to SecurityPills.com. Like PureSafetyHere.com – and SecureInvites.com, and PageforSafety.com – , which SecurityPills.com is a clone of, SecurityPills.com pimps rogue anti-spyware, such as AntiSpyware Shield and WinSpyKiller. SecurityPills.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SecurityPills.com popup reads:
Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: 1. Creates files in %Windir%\ directory. By default, this is C:\Windows.
2. Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
3. Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software. Always keep your patch levels up-to-date.
If you click “OK” you’re taken to MalwareCore.com to waste money on fake anti-spyware.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SecurityPills.com. And the only thing SecurityPills.com and its rogue anti-spyware removes is money from your pockets.

So remove SecurityPills.com.

Keep reading »

X-Max.net Threat Level:

X-Max.net is another Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. X-Max.net might sell fake anti-spyware with annoying popups or fake security scans. X-Max.net may also hijack your Google and Yahoo searches and replace them with “sponsored” links to adult or gambling content.

If you wanted that, you’d just hit YouPorn.com, right? So delete X-Max.net.

Keep reading »

SecurityToolbar Threat Level:

SecurityToolbar is another Zlob.Trojan/Trojan Zlob toolbar clone, created to pimp rogue anti-spyware. SecurityToolbar might sell fake anti-spyware with popups, a home page hijack, and SecurityToolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have SecurityToolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy SecurityToolbar or the products it’s pimping.

Keep reading »

Etlrlws Toolbar Threat Level:

Etlrlws Toolbar is another Zlob.Trojan/Trojan Zlob toolbar clone, designed to sell rogue anti-spyware. Etlrlws Toolbar might sell fake anti-spyware with annoying popups, hijacking your home page, and Etlrlws Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have Etlrlws Toolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting ripped off, don’t buy Etlrlws Toolbar or the products it’s pimping.

Keep reading »

Enlfxgw Toolbar Threat Level:

Enlfxgw Toolbar is another clone of a Zlob.Trojan/Trojan Zlob toolbar, which is designed to sell rogue anti-spyware. Enlfxgw Toolbar might sell fake anti-spyware by hijacking your home page, annoying popups, and Enlfxgw Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” When you have Enlfxgw Toolbar, your search results could be topped with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Unless you like getting scammed, don’t buy Enlfxgw Toolbar or the products it’s pimping.

Keep reading »

AdGoblin Threat Level:

AdGoblin is adware that installs itself as a browser helper object (BHO), and pops up enough annoying ads on Internet Explorer that AdGoblin might even make your browser unusable. You could try removing AdGoblin through the usual remove/uninstall applications. And if that doesn’t work?

Throw your PC out the window.

Keep reading »

Ekvgsnw Toolbar Threat Level:

Ekvgsnw Toolbar is another clone of a Zlob.Trojan/Trojan Zlob toolbar, which is designed to sell rogue anti-spyware, partly through Ekvgsnw Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” Ekvgsnw Toolbar may change your home page. Ekvgsnw Toolbar might also use annoying popups to promote rogue anti-spyware, like WinSpyKiller. Ekvgsnw Toolbar might also top your search results with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”.

Unless you like getting ripped off, don’t believe Ekvgsnw Toolbar and the products it’s pimping.

Keep reading »

Emotigt Toolbar Threat Level:

Emotigt Toolbar is another clone of a Zlob.Trojan/Trojan Zlob toolbar, which is designed to sell rogue anti-spyware, partly through Emotigt Toolbar’s buttons for “Scan Spyware, Spam Protection, Remove Popups, and Security Test.” Emotigt Toolbar may change your home page. Emotigt Toolbar might also use annoying popups to promote rogue anti-spyware, like WinSpyKiller. Emotigt Toolbar might also top your search results with this fake message:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”.

Unless you like getting ripped off, don’t believe Emotigt Toolbar and the products it’s pimping.

Keep reading »

Cyberstoll.com Threat Level:

Cyberstoll.com is a browser hijacker that redirects you to Cyberstoll.com.com and other malicious sites that’ll download malware onto your computer. Cyberstoll.com may also popup fake Windows registry errors on your PC at startup, log your activity and send it to a hacker, and slow down your PC while doing so. Cyberstoll.com may have been installed onto your computer through a trojan, using browser security holes.

Cyberstoll.com is hard to remove manually, but you should delete Cyberstoll.com ASAP. Unless you like broken computers.

If that’s the case, email me and I’ll sell you my 1999 Dell.

Keep reading »