Gksraemq Toolbar Threat Level:

Introducing Gksraemq Toolbar, the latest toolbar by everyone’s favorite Trojan, Zlob. Gksraemq Toolbar was created to scare you into buying fake anti-spyware.

You’ll scream in frustration as Gksraemq Toolbar generates pop up ads as fast you can close them.

You’ll lose your sanity when Gksraemq Toolbar hijacks your home page, in the hopes you’ll click Gksraemq Toolbar’s buttons and install a rogue antivirus.

If this sounds like a fun-filled day, by all means keep Gksraemq Toolbar. If not we’ll show you how to remove Gksraemq Toolbar for free.

Read more about Gksraemq Toolbar »

HomeSiteURLs.com/security/xp Threat Level:

HomeSiteURLs.com/security/xp is a fake anti-spyware browser hijacker. You can be visiting a web site and out of nowhere a pop up appears saying:

“The page at http://www.HomeSiteURLs.com/security/xp says:
W32.Myzor.fk@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from this computer. Click Ok to download officially approved security software. Always keep your patch levels up to date

If you click “OK,” Windows Antivirus 2008 (AKA: Win Antivirus 2008) will be downloaded. Clicking “Cancel” moves you on a page promoting Windows Antivirus and Ultimate Antivirus.

I recommend you block HomeSiteURLs.com/security/xp. If your computer keeps going to HomeSiteURLs.com/security/xp, we’ll show you how to remove HomeSiteURLs.com/security/xp for free.

Read more about HomeSiteURLs.com/security/xp »

Xupiter is an Internet Explorer toolbar that may change your home page, redirect your search queries through Xupiter’s search engine, and add itself to your Favorites/bookmarks. Xupiter may also launch popup advertisements.

Read more about Xupiter »

DoubleStartPage.com/xp/ Threat Level:

DoubleStartPage.com/xp/ is the latest browser hijacker that changes your home page to DoubleStartPage.com/xp/. Like its evil twin DoBrowseSecure.com/xp, DoubleStartPage.com/xp/ promotes fake anti-spyware, like Ultimate Antivirus and Windows Antivirus 2008. DoubleStartPage.com/xp/ runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This DoubleStartPage.com/xp/ popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with DoubleStartPage.com/xp/. And the only thing DoubleStartPage.com/xp/ and its fake anti-spyware removes is money from your pockets.

So get rid of DoubleStartPage.com/xp/.

Read more about DoubleStartPage.com/xp/ »

Detect-File101.com Threat Level:

Detect-File101.com is the latest home to fake anti-spyware XP Antivirus Protection. Detect-File101.com offers a free scan with XP Antivirus Protection. What a deal. Only if you download the trial, XP Antivirus Protection tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying XP Antivirus Protection for $49.95-$79.95. This Detect-File101.com popup might read:

“The page at http://Detect-File101.com says:
ATTENTION! You have not completed the virus scan!
Your PC is still infected with spyware!
Please return to XPantivirus.com and download XP antivirus scanner.”

Despite whatever Detect-File101.com says, if you don’t remember how you got to Detect-File101.com, the only spyware you’re infected with is XP Antivirus Protection. So just remove XP Antivirus Protection, before you throw your PC out the window.

Read more about Detect-File101.com »

Scanner.AntiVir-64.com Threat Level:

Scanner.AntiVir-64.com is a scam site that’s home to fake anti-spyware AntiVir64 2.7. Scanner.AntiVir-64.com rigs a security scan that tells you you’re infected with spyware and other dirty things. Then, a Scanner.AntiVir-64.com popup reads:

http://Scanner.AntiVir-64.com says:
“Do not close this window if you want to clean up your PC.”

Sure, the AntiVir64 2.7 download to “clean up your PC” is free, but by “free” Scanner.AntiVir-64.com means AntiVir64 2.7 will cost you nothing but your sanity: AntiVir64 2.7 will haunt you with popup and exaggerated security alerts.

I’ll show you how to block Scanner.AntiVir-64.com and get rid of AntiVir64 2.7 for free.

Read more about Scanner.AntiVir-64.com »

Qalkfxor Toolbar Threat Level:

Qalkfxor Toolbar is the latest toolbar by everyone’s favorite Trojan, Zlob. Qalkfxor Toolbar was created to scare you into buying fake anti-spyware. To scam you, Qalkfxor Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Qalkfxor Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its impossible-to-pronounce name makes it clear — Qalkfxor Toolbar isn’t exactly about pleasing its customers.

If you have Qalkfxor Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Qalkfxor Toolbar. Unless you like wasting money, don’t buy Qalkfxor Toolbar or the products it’s pimping.

Read more about Qalkfxor Toolbar »

Scan.Secure-Online-Antivirus.com Threat Level:

Scan.Secure-Online-Antivirus.com is a scam site that’s home to fake anti-spyware Antispyware 2008. Scan.Secure-Online-Antivirus.com rigs a security scan that tells you you’re infected with spyware and other dirty things. Scan.Secure-Online-Antivirus.com popup reads:

“http://Scan.Secure-Online-Antivirus.com says:
This is an example system check for spyware and privacy threats. Some security vulnerabilities are most probably present on your PC. To keep your computer free of spyware, please select “RUN” or “OPEN” when prompted to start the installation of full Antispyware 2008 version. This file has been digitally signed and independently certified as 100% free of viruses, adware and spyware.”

Click “OK” (your only option), and you get another Scan.Secure-Online-Antivirus.com popup:

“http://Scan.Secure-Online-Antivirus.com says:
NOTICE: If your computer has been running slower than normal, it may be infected with Viruses, Adware or Spyware. Antispyware 2008 will perform a quick and completely FREE scan of your system for malicious programs. Download Antispyware 2008 for FREE now!”

By “FREE,” Scan.Secure-Online-Antivirus.com means Antispyware 2008 will cost you nothing but your sanity: Antispyware 2008 will haunt you with popup and exaggerated security alerts.

I’ll show you how to block Scan.Secure-Online-Antivirus.com and get rid of Antispyware 2008 for free.

Read more about Scan.Secure-Online-Antivirus.com »

FilesCheck-List303.com Threat Level:

FilesCheck-List303.com is home to fake anti-spyware Antivirus 2009. FilesCheck-List303.com offers a free scan with Antivirus 2009.

What a deal.

Only if you download the trial, Antivirus 2009 tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying Antivirus 2009 for $49.95-$79.95.

Despite whatever FilesCheck-List303.com says, if you don’t remember how you got to FilesCheck-List303.com, the only spyware you’re infected with is Antivirus 2009. So just remove Antivirus 2009, before you throw your PC out the window.

Read more about FilesCheck-List303.com »

Detection-File101.com Threat Level:

Detection-File101.com is the latest home to fake anti-spyware XP Antivirus Protection. Detection-File101.com offers a free scan with XP Antivirus Protection. What a deal. Only if you download the trial, XP Antivirus Protection tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying XP Antivirus Protection for $49.95-$79.95. This Detection-File101.com popup might read:

“The page at http://Detection-File101.com says:
ATTENTION! You have not completed the virus scan!
Your PC is still infected with spyware!
Please return to XPantivirus.com and download XP antivirus scanner.”

Despite whatever Detection-File101.com says, if you don’t remember how you got to Detection-File101.com, the only spyware you’re infected with is XP Antivirus Protection. So just remove XP Antivirus Protection, before you throw your PC out the window.

Read more about Detection-File101.com »