<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>411 on Spyware &#187; Browser Hijackers</title>
	<atom:link href="http://www.411-spyware.com/remove/browser-hijackers/feed" rel="self" type="application/rss+xml" />
	<link>http://www.411-spyware.com</link>
	<description>411-Spyware.com</description>
	<lastBuildDate>Fri, 20 Nov 2009 02:05:11 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>AwareRemover.com</title>
		<link>http://www.411-spyware.com/remove-awareremover-com</link>
		<comments>http://www.411-spyware.com/remove-awareremover-com#comments</comments>
		<pubDate>Wed, 09 Sep 2009 18:32:45 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Antivirus System Pro]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5246</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/AwareRemover.com.gif" title="AwareRemover.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/AwareRemover.com.gif" class="alignleft" alt="AwareRemover.com screenshot" /></a> <strong>AwareRemover.com</strong> is spam website that pushes fak eantispyware app <a title="AwareRemover.com promotes Antivirus System PRO" href="http://www.411-spyware.com/remove-antivirus-system-pro">Antivirus System PRO</a>. Once AwareRemover.com's scareware sneaks onto your computer, it changes your Windows Hosts file and turns your browser into an insane spam-zombie until you purge it from your computer. 

Some of AwareRemover.com popups will say your computer is infected with harmful content, or that you have an insecure connection. You're then prompted to take actions such as turning off your firewall (bad) or downloading more fake software (also bad). AwareRemover.com will bug you for money for a "full" version of Antivirus System PRO. But a "full" version of Antivirus System PRO is like AwareRemover.com's credibility -- non-existant.

If you see a link to Awareremover.com, be aware that the site is not your friend. And if you end up with Antivirus System PRO on your computer, follow these steps to block AwareRemover.com on your PC, for free. ]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-awareremover-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Best-Antivirus03.com</title>
		<link>http://www.411-spyware.com/remove-best-antivirus03-com</link>
		<comments>http://www.411-spyware.com/remove-best-antivirus03-com#comments</comments>
		<pubDate>Tue, 08 Sep 2009 05:04:53 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Personal Antivirus]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5264</guid>
		<description><![CDATA[Remember how much fun we had a couple months back with rogue spyware application <a title="Personal Antivirus is related to Best-Antivirus03.com" href="http://www.411-spyware.com/personal-antivirus-removal">Personal Antivirus</a>? Well, we’re in luck, because it’s back, thanks to browser hijacker Best-Antivirus03.com.

I was skimming NYTimes.com's review of Jay-Z'z latest when my browser was hijacked by Best-Antivirus03.com's popups:
<blockquote> “Warning!!! Your system requires immediate anti-viruses scan! Personal Antivirus can perform fast and free virus and malicious software scan of your computer .”
“Your computer remains infected by threats! They might lead to data loss and file structure damage, and needed to be heal as soon as possible.  Return to Personal Antivirus and download it secure to your PC."
“Potentially dangerous software. These programs may damage your computer and steal your private information. Online Security Checker needs Personal Antivirus components to repair your computer. Please click Ok to download and install Personal Antivirus tool.”</blockquote>

Best-Antivirus03.com also runs a fake system scan to alert you that your system is infected with a bunch of made-up threats, and then it tries to get you to download an antispyware application, which turns out to be—you guessed it, our old, fake friend Personal Antivirus. 

Let's get you back to NYTimes.com -- or whatever you were really reading.  Let me show how to block Best-Antivirus03.com.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-best-antivirus03-com/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>WindowsClick.com</title>
		<link>http://www.411-spyware.com/remove-windowsclick-com</link>
		<comments>http://www.411-spyware.com/remove-windowsclick-com#comments</comments>
		<pubDate>Wed, 22 Jul 2009 19:36:49 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=5022</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/WindowsClick.com.gif" title="WindowsClick.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/WindowsClick.com.gif" class="alignleft" alt="WindowsClick.com screenshot" /></a><strong>WindowsClick.com</strong> is a website you get redirected to when you're infected with UACd.sys Trojan.  So do you have UACd.sys Trojan?  That's an annoyingly easy question to answer:  if you're infected with this WindowsClick.com Trojan, most of your web searches and attempts to access security sites  -- like McAffee's and Symantec's -- will redirect you to WindowsClick.com. What's the point? WindowsClick.com appears to be riddled with Searchportal.information.com and other ads that put you in an endless loop of click-based moneymaking.

The spam spiral that's WindowsClick.com should have been a circle of Dante's Hell.

Before you set fire to your computer to stop WindowsClick.com redirects, I'll show you how to block WindowsClick.com by removing UACd.sys Trojan.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-windowsclick-com/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Unregistered Version of AntivirusBEST</title>
		<link>http://www.411-spyware.com/remove-unregistered-version-of-antivirusbest</link>
		<comments>http://www.411-spyware.com/remove-unregistered-version-of-antivirusbest#comments</comments>
		<pubDate>Fri, 03 Jul 2009 16:24:36 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[AntivirusBEST]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4944</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/Internet-Explorer-has-found.gif" title="Unregistered Version of AntivirusBEST screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/Internet-Explorer-has-found.gif" class="alignleft" alt="Unregistered Version of AntivirusBEST screenshot" /></a>  An <strong>unregistered version of AntivirusBEST</strong> is the best version of AntivirusBEST you can have, though you don't want any version of this scamware.  If your browser is hijacked with a message that reads "Internet Explorer has found an unregistered version of AntivirusBEST. To protect your computer, please register your AntivirusBEST" --

I'm sorry.

Don't follow this "Internet Explorer has found an unregistered version of AntivirusBEST" message's prompts -- if you do, you'll be tricked into buying the "full" version of AntivirusBEST.  What does a registered version of AntivirusBEST do? AntivirusBEST slows down your computer, drives you bananas with popups, and removes credit from your AmEx, extra time you thought you had this weekend, and your sanity.

Let me show you how to uninstall an unregistered version of AntivirusBEST.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-unregistered-version-of-antivirusbest/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OnlineBrowsingHelp.com</title>
		<link>http://www.411-spyware.com/remove-onlinebrowsinghelp-com</link>
		<comments>http://www.411-spyware.com/remove-onlinebrowsinghelp-com#comments</comments>
		<pubDate>Thu, 25 Jun 2009 00:25:50 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Personal Antivirus]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4881</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/OnlineBrowsingHelp.com.gif" title="OnlineBrowsingHelp.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/OnlineBrowsingHelp.com.gif" class="alignleft" alt="OnlineBrowsingHelp.com screenshot" /></a><strong>OnlineBrowsingHelp.com</strong> is a rather genius scam website.  Instead of trying to convince you that your system is infected with imaginary spyware, OnlineBrowsingHelp.com is honest: the  sham site tells you OnlineBrowsingHelp.com is unsafe. OnlineBrowsingHelp.com reads:

<blockquote>"<strong>This website has been reported as unsafe.</strong> We recommend that you do not continue to this website. <u>Activate my Web protection software.</u> This website has been reported to Microsoft for containing threats to your computer that might reveal personal or financial information."</blockquote>

That's where OnlineBrowsingHelp.com's honesty ends. If you click any of OnlineBrowsingHelp.com's links, you're taken to webpage pimping fake antivirus <a title="OnlineBrowsingHelp.com pimps Personal Antivirus" href="http://www.411-spyware.com/personal-antivirus-removal">Personal Antivirus</a>. The only thing Personal Antivirus removes is cash from your pockets.

If OnlineBrowsingHelp.com has hijacked your browser, the only issue you have is OnlineBrowsingHelp.com and Personal Antivirus.  So let me show you how to block OnlineBrowsingHelp.com and uninstall OnlineBrowsingHelp.com, before you go bananas.
]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-onlinebrowsinghelp-com/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Yiqilai</title>
		<link>http://www.411-spyware.com/remove-yiqilai</link>
		<comments>http://www.411-spyware.com/remove-yiqilai#comments</comments>
		<pubDate>Thu, 18 Jun 2009 14:42:17 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4797</guid>
		<description><![CDATA[<strong>Yiqilai</strong> pimps itself as a search-assisting toolbar, an e-Girl Scout helping you to cross the web's street. Only imagine that the whole time Girl Scout Yiqilai helps you cross the street, it keeps jabbering about buying cookies, those peanut butter ones it saw you buying yesterday, c'mon, buy, buy, buy.

That's what Yiqilai may do -- while it's acting like Mom Theresa and helping you browse the web, Yiqilai may track your web surfing, and display Yiqilai ads tailored to your activity.  Yiqilai may also come bundled with badware. 

Let me show you how to get rid of Yiqilai, before Yiqilai throws you and your PC under the bus.
]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-yiqilai/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Scan-AV-Express.com</title>
		<link>http://www.411-spyware.com/block-scan-av-express-com</link>
		<comments>http://www.411-spyware.com/block-scan-av-express-com#comments</comments>
		<pubDate>Wed, 17 Jun 2009 18:28:02 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[System Security]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4791</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/Scan-AV-Express.com.gif" title="Scan-AV-Express.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/Scan-AV-Express.com.gif" class="alignleft" alt="Scan-AV-Express.com screenshot" /></a><strong>Scan-AV-Express.com</strong> is a sham website shilling scareware.  Scan-AV-Express.com spoofs scanning your computer for threats, then hijacks your browser with its  spoof security alerts.  Fab.  These Scan-AV-Express.com popups read:
<blockquote><small>"<strong>http://Scan-AV-Express.com says:</strong> Warning!!! Your computer contains various signs of viruses and malware programs presence. Your system requires immediate anti viruses check!System Security will perform a quick and free scanning of your PC for viruses and malicious programs."
And:
"<strong>The page at http://Scan-AV-Express.com says:</strong> Your computer remains infected by viruses! They can cause data loss and file damages and need to be cured as soon as possible. Return to System Security and download it secure to your PC"</small></blockquote>
Scan-AV-Express.com's goal? To get you to waste money on <a title="Scan-AV-Express.com pimps System Security" href="http://www.411-spyware.com/system-security-removal">fake anti-spyware System Security</a>.

Despite Scan-AV-Express.com's ringing the alarm, the only threat you're dealing with is one to your sanity:  Scan-AV-Express.com fugging up your web browser.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/block-scan-av-express-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OurBestSecurityShield.com</title>
		<link>http://www.411-spyware.com/block-ourbestsecurityshield-com</link>
		<comments>http://www.411-spyware.com/block-ourbestsecurityshield-com#comments</comments>
		<pubDate>Thu, 11 Jun 2009 18:42:59 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[System Security]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4762</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/OurBestSecurityShield.com.gif" title="OurBestSecurityShield.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/OurBestSecurityShield.com.gif" class="alignleft" alt="OurBestSecurityShield.com screenshot" /></a><strong>OurBestSecurityShield.com</strong> is a sham site that shills scareware.  OurBestSecurityShield.com spoofs scanning your system, then launches a  "security" alerts.  Lovely.  These OurBestSecurityShield.com popups read:
<blockquote><small>"<strong>http://OurBestSecurityShield.com says:</strong> Warning!!!  Your computer contains various signs of viruses and malware programs presence.  Your system requires immediate anti viruses check!  System Security will perform a quick and free scanning of your PC for viruses and malicious programs."
And:
"<strong>The page at http://OurBestSecurityShield.com says:</strong> Your computer remains infected by viruses!  They can cause data loss and file damages and need to be cured as soon as possible.  Return to System Security and download it secure to your PC"</small></blockquote>
OurBestSecurityShield.com's goal? To get you to waste money on <a title="OurBestSecurityShield.com pimps System Security" href="http://www.411-spyware.com/system-security-removal">fake anti-spyware System Security</a>.

Despite OurBestSecurityShield.com's alarms, the only threat you're dealing with is one to your sanity:  OurBestSecurityShield.com effing up your browser.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/block-ourbestsecurityshield-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GetAntivirusPlus09.com</title>
		<link>http://www.411-spyware.com/remove-getantivirusplus09-com</link>
		<comments>http://www.411-spyware.com/remove-getantivirusplus09-com#comments</comments>
		<pubDate>Sat, 30 May 2009 03:58:17 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Antivirus Plus]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4679</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/GetAntivirusPlus09.com.gif" title="GetAntivirusPlus09.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/GetAntivirusPlus09.com.gif" class="alignleft" alt="GetAntivirusPlus09.com screenshot" /></a><strong>GetAntivirusPlus09.com</strong> is a scam site that pimps scareware <a title="GetAntivirusPlus09.com pimps Antivirus Plus" href="http://www.411-spyware.com/antivirus-plus">Antivirus Plus</a>.  GetAntivirusPlus09.com hijacks your browser and displays a fake security warning that reads:
<blockquote>"<strong>Insecure Internet activity. Threat of virus attack.</strong> Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register Antivirus Plus. We recommend you to protect your PC now and continue safe Internet browsing.
Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended)."</blockquote>
If you click to "get full advanced real-time protection," you'll be taken to FreeAntivirusPlus09.com to waste $49.95-99.95 on scam software Antivirus Plus.  Despite these "security alerts," the only threat you're dealing with is one to your sanity:  GetAntivirusPlus09.com stealing your browser.

Let me show you how to block GetAntivirusPlus09.com.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-getantivirusplus09-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SecurityOnlineSite.com</title>
		<link>http://www.411-spyware.com/remove-securityonlinesite-com</link>
		<comments>http://www.411-spyware.com/remove-securityonlinesite-com#comments</comments>
		<pubDate>Thu, 28 May 2009 18:28:15 +0000</pubDate>
		<dc:creator>Kristopher</dc:creator>
				<category><![CDATA[Browser Hijackers]]></category>
		<category><![CDATA[Scareware]]></category>
		<category><![CDATA[System]]></category>

		<guid isPermaLink="false">http://www.411-spyware.com/?p=4668</guid>
		<description><![CDATA[<a href="http://www.411-spyware.com/images/SecurityOnlineSite.com.gif" title="SecurityOnlineSite.com screenshot" rel="lightbox"><img src="http://www.411-spyware.com/images/SecurityOnlineSite.com.gif" class="alignleft" alt="SecurityOnlineSite.com screenshot" /></a><strong>SecurityOnlineSite.com</strong> is a sham website that shills scareware System Security.  SecurityOnlineSite.com fakes scanning your computer, then launches a few "security" warnings.  Wonderful.  These SecurityOnlineSite.com pop-up alerts read:
<blockquote><small>"<strong>http://SecurityOnlineSite.com says:</strong> Warning!!!  Your computer contains various signs of viruses and malware programs presence.  Your system requires immediate anti viruses check!  System Security will perform a quick and free scanning of your PC for viruses and malicious programs."
And:
"<strong>The page at http://SecurityOnlineSite.com says:</strong> Your computer remains infected by viruses!  They can cause data loss and file damages and need to be cured as soon as possible.  Return to System Security and download it secure to your PC"</small></blockquote>
SecurityOnlineSite.com's goal? To get you to waste money on fake anti-spyware <a title="SecurityOnlineSite.com pimps System Security" href="http://www.411-spyware.com/system-security-removal">System Security</a>.

Despite SecurityOnlineSite.com's alarms, the only threat you're dealing with is one to your sanity:  SecurityOnlineSite.com hijacking your browser.]]></description>
		<wfw:commentRss>http://www.411-spyware.com/remove-securityonlinesite-com/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
