09 Sep 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

AwareRemover.com screenshot AwareRemover.com is spam website that pushes fak eantispyware app Antivirus System PRO. Once AwareRemover.com’s scareware sneaks onto your computer, it changes your Windows Hosts file and turns your browser into an insane spam-zombie until you purge it from your computer.

Some of AwareRemover.com popups will say your computer is infected with harmful content, or that you have an insecure connection. You’re then prompted to take actions such as turning off your firewall (bad) or downloading more fake software (also bad). AwareRemover.com will bug you for money for a “full” version of Antivirus System PRO. But a “full” version of Antivirus System PRO is like AwareRemover.com’s credibility — non-existant.

If you see a link to Awareremover.com, be aware that the site is not your friend. And if you end up with Antivirus System PRO on your computer, follow these steps to block AwareRemover.com on your PC, for free.

Keep reading »


07 Sep 2009 | By Kristopher | Posted under Browser Hijackers | 1 Comment »

Remember how much fun we had a couple months back with rogue spyware application Personal Antivirus? Well, we’re in luck, because it’s back, thanks to browser hijacker Best-Antivirus03.com.

I was skimming NYTimes.com’s review of Jay-Z’z latest when my browser was hijacked by Best-Antivirus03.com’s popups:

“Warning!!! Your system requires immediate anti-viruses scan! Personal Antivirus can perform fast and free virus and malicious software scan of your computer .”
“Your computer remains infected by threats! They might lead to data loss and file structure damage, and needed to be heal as soon as possible. Return to Personal Antivirus and download it secure to your PC.”
“Potentially dangerous software. These programs may damage your computer and steal your private information. Online Security Checker needs Personal Antivirus components to repair your computer. Please click Ok to download and install Personal Antivirus tool.”

Best-Antivirus03.com also runs a fake system scan to alert you that your system is infected with a bunch of made-up threats, and then it tries to get you to download an antispyware application, which turns out to be—you guessed it, our old, fake friend Personal Antivirus.

Let’s get you back to NYTimes.com — or whatever you were really reading. Let me show how to block Best-Antivirus03.com.

Keep reading »


22 Jul 2009 | By Kristopher | Posted under Browser Hijackers | 1 Comment »

WindowsClick.com screenshotWindowsClick.com is a website you get redirected to when you’re infected with UACd.sys Trojan. So do you have UACd.sys Trojan? That’s an annoyingly easy question to answer: if you’re infected with this WindowsClick.com Trojan, most of your web searches and attempts to access security sites — like McAffee’s and Symantec’s — will redirect you to WindowsClick.com. What’s the point? WindowsClick.com appears to be riddled with Searchportal.information.com and other ads that put you in an endless loop of click-based moneymaking.

The spam spiral that’s WindowsClick.com should have been a circle of Dante’s Hell.

Before you set fire to your computer to stop WindowsClick.com redirects, I’ll show you how to block WindowsClick.com by removing UACd.sys Trojan.

Keep reading »


03 Jul 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

Unregistered Version of AntivirusBEST screenshot An unregistered version of AntivirusBEST is the best version of AntivirusBEST you can have, though you don’t want any version of this scamware. If your browser is hijacked with a message that reads “Internet Explorer has found an unregistered version of AntivirusBEST. To protect your computer, please register your AntivirusBEST” –

I’m sorry.

Don’t follow this “Internet Explorer has found an unregistered version of AntivirusBEST” message’s prompts — if you do, you’ll be tricked into buying the “full” version of AntivirusBEST. What does a registered version of AntivirusBEST do? AntivirusBEST slows down your computer, drives you bananas with popups, and removes credit from your AmEx, extra time you thought you had this weekend, and your sanity.

Let me show you how to uninstall an unregistered version of AntivirusBEST.

Keep reading »


24 Jun 2009 | By Kristopher | Posted under Browser Hijackers | 2 Comments »

OnlineBrowsingHelp.com screenshotOnlineBrowsingHelp.com is a rather genius scam website. Instead of trying to convince you that your system is infected with imaginary spyware, OnlineBrowsingHelp.com is honest: the sham site tells you OnlineBrowsingHelp.com is unsafe. OnlineBrowsingHelp.com reads:

This website has been reported as unsafe. We recommend that you do not continue to this website. Activate my Web protection software. This website has been reported to Microsoft for containing threats to your computer that might reveal personal or financial information.”

That’s where OnlineBrowsingHelp.com’s honesty ends. If you click any of OnlineBrowsingHelp.com’s links, you’re taken to webpage pimping fake antivirus Personal Antivirus. The only thing Personal Antivirus removes is cash from your pockets.

If OnlineBrowsingHelp.com has hijacked your browser, the only issue you have is OnlineBrowsingHelp.com and Personal Antivirus. So let me show you how to block OnlineBrowsingHelp.com and uninstall OnlineBrowsingHelp.com, before you go bananas.

Keep reading »


18 Jun 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

Yiqilai pimps itself as a search-assisting toolbar, an e-Girl Scout helping you to cross the web’s street. Only imagine that the whole time Girl Scout Yiqilai helps you cross the street, it keeps jabbering about buying cookies, those peanut butter ones it saw you buying yesterday, c’mon, buy, buy, buy.

That’s what Yiqilai may do — while it’s acting like Mom Theresa and helping you browse the web, Yiqilai may track your web surfing, and display Yiqilai ads tailored to your activity. Yiqilai may also come bundled with badware.

Let me show you how to get rid of Yiqilai, before Yiqilai throws you and your PC under the bus.

Keep reading »


17 Jun 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

Scan-AV-Express.com screenshotScan-AV-Express.com is a sham website shilling scareware. Scan-AV-Express.com spoofs scanning your computer for threats, then hijacks your browser with its spoof security alerts. Fab. These Scan-AV-Express.com popups read:

http://Scan-AV-Express.com says: Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check!System Security will perform a quick and free scanning of your PC for viruses and malicious programs.”
And:
The page at http://Scan-AV-Express.com says: Your computer remains infected by viruses! They can cause data loss and file damages and need to be cured as soon as possible. Return to System Security and download it secure to your PC”

Scan-AV-Express.com’s goal? To get you to waste money on fake anti-spyware System Security.

Despite Scan-AV-Express.com’s ringing the alarm, the only threat you’re dealing with is one to your sanity: Scan-AV-Express.com fugging up your web browser.

Keep reading »


11 Jun 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

OurBestSecurityShield.com screenshotOurBestSecurityShield.com is a sham site that shills scareware. OurBestSecurityShield.com spoofs scanning your system, then launches a “security” alerts. Lovely. These OurBestSecurityShield.com popups read:

http://OurBestSecurityShield.com says: Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check! System Security will perform a quick and free scanning of your PC for viruses and malicious programs.”
And:
The page at http://OurBestSecurityShield.com says: Your computer remains infected by viruses! They can cause data loss and file damages and need to be cured as soon as possible. Return to System Security and download it secure to your PC”

OurBestSecurityShield.com’s goal? To get you to waste money on fake anti-spyware System Security.

Despite OurBestSecurityShield.com’s alarms, the only threat you’re dealing with is one to your sanity: OurBestSecurityShield.com effing up your browser.

Keep reading »


29 May 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

GetAntivirusPlus09.com screenshotGetAntivirusPlus09.com is a scam site that pimps scareware Antivirus Plus. GetAntivirusPlus09.com hijacks your browser and displays a fake security warning that reads:

Insecure Internet activity. Threat of virus attack. Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register Antivirus Plus. We recommend you to protect your PC now and continue safe Internet browsing.
Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended).”

If you click to “get full advanced real-time protection,” you’ll be taken to FreeAntivirusPlus09.com to waste $49.95-99.95 on scam software Antivirus Plus. Despite these “security alerts,” the only threat you’re dealing with is one to your sanity: GetAntivirusPlus09.com stealing your browser.

Let me show you how to block GetAntivirusPlus09.com.

Keep reading »


28 May 2009 | By Kristopher | Posted under Browser Hijackers | No Comments »

SecurityOnlineSite.com screenshotSecurityOnlineSite.com is a sham website that shills scareware System Security. SecurityOnlineSite.com fakes scanning your computer, then launches a few “security” warnings. Wonderful. These SecurityOnlineSite.com pop-up alerts read:

http://SecurityOnlineSite.com says: Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check! System Security will perform a quick and free scanning of your PC for viruses and malicious programs.”
And:
The page at http://SecurityOnlineSite.com says: Your computer remains infected by viruses! They can cause data loss and file damages and need to be cured as soon as possible. Return to System Security and download it secure to your PC”

SecurityOnlineSite.com’s goal? To get you to waste money on fake anti-spyware System Security.

Despite SecurityOnlineSite.com’s alarms, the only threat you’re dealing with is one to your sanity: SecurityOnlineSite.com hijacking your browser.

Keep reading »