Browser Helper Object Archive

Browser Helper Object: Nqgpedlr Toolbar

July 7th, 2008 | Posted in Browser Helper Object, Browser Hijackers

Nqgpedlr Toolbar Threat Level: Nqgpedlr Toolbar is a Pest

Nqgpedlr Toolbar Nqgpedlr Toolbar is the latest toolbar by everyone’s favorite Trojan, Zlob. Nqgpedlr Toolbar was created to scare you into buying fake anti-spyware. To scam you, Nqgpedlr Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Nqgpedlr Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its impossible-to-pronounce name makes it clear — Nqgpedlr Toolbar isn’t exactly about pleasing its customers.

If you have Nqgpedlr Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Nqgpedlr Toolbar. Unless you like wasting money, don’t buy Nqgpedlr Toolbar or the products it’s pimping.

Read more about Nqgpedlr Toolbar »


Browser Helper Object: DotCom Toolbar 1.0

July 4th, 2008 | Posted in Browser Helper Object, Browser Hijackers

DotCom Toolbar 1.0 Threat Level: DotCom Toolbar 1.0 is a Pest

DotCom Toolbar 1.0 is a scam toolbar that might have been installed on your computer by everyone’s favorite Trojan, Zlob. Like other crapbars, DotCom Toolbar 1.0 was probably created to scare you into buying fake anti-spyware. To scam you, DotCom Toolbar 1.0 pops up annoying ads, hijacks your home page, and hopes you’ll click DotCom Toolbar 1.0’s buttons.

Unless you like wasting money, don’t buy DotCom Toolbar 1.0 or the products it’s pimping.

Read more about DotCom Toolbar 1.0 »


Browser Helper Object: Windows-Privacy-Protection.com

June 18th, 2008 | Posted in Browser Helper Object, Browser Hijackers

Windows-Privacy-Protection.com Threat Level: Windows-Privacy-Protection.com is a pest

Windows-Privacy-Protection.com screenshot Windows-Privacy-Protection.com is a fake anti-spyware site promoting rogue security software SpyMaxx and AntispyStorm2008 for $49.95 each. Windows-Privacy-Protection.com offers free system scans, which will only cost you your sanity: if you download a Windows-Privacy-Protection.com scan, you’ll likely get tons of fake security alert popups.

Despite whatever Windows-Privacy-Protection.com says, if you don’t remember how you got to Windows-Privacy-Protection.com, the only spyware you’re infected with is Windows-Privacy-Protection.com.

Read more about Windows-Privacy-Protection.com »


Browser Helper Object: Peppi Vorlagen

June 9th, 2008 | Posted in Adware, Browser Helper Object, Browser Hijackers

Peppi Vorlagen Threat Level: Peppi Vorlagen is a Pest

Peppi Vorlagen is a browser hijacker that changes your home page, modifies your search results, and talks to its parent server about downloading more adware to annoy you with.

What else does Peppi Vorlagen do?

Peppi Vorlagen may also make you want to throw your computer out the window.

So let’s get rid of Peppi Vorlagen.

Read more about Peppi Vorlagen »


Browser Helper Object: Nmwegbsf Toolbar

June 4th, 2008 | Posted in Browser Helper Object, Browser Hijackers, Nmwegbsf Tool bar

Nmwegbsf Toolbar Threat Level: Nmwegbsf Toolbar is a Pest

Nmwegbsf Toolbar Nmwegbsf Toolbar is another toolbar by Trojan Zlob, designed to trick you into buying fake anti-spyware. Nmwegbsf Toolbar is a clone of Gktxaspm Toolbar(which is a clone of Pvnsmfor Toolbar. Which is a clone of Mkrndofl Toolbar. Notice a pattern?)

To try to scam you, Nmwegbsf Toolbar launches annoying popups, hijacks your home page, and pushes you to click Nmwegbsf Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

If you have Nmwegbsf Toolbar, your search results might be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re infected with is that Nmwegbsf Toolbar.

Instead of buying whatever Nmwegbsf Toolbar is selling, just burn money. It’ll be cheaper.

Read more about Nmwegbsf Toolbar »


Browser Helper Object: Atfxqogp Toolbar

May 26th, 2008 | Posted in Atfxqogp Tool bar, AtfxqogpToolbar, Browser Helper Object, Browser Hijackers, Rogue Anti Spyware

Atfxqogp Toolbar Threat Level: Atfxqogp Toolbar is a Pest

Atfxqogp Toolbar Atfxqogp Toolbar is another toolbar by Trojan Zlob, designed to trick you into buying fake anti-spyware. Atfxqogp Toolbar is a clone of Gktxaspm Toolbar(which is a clone of Pvnsmfor Toolbar. Which is a clone of Mkrndofl Toolbar. See a pattern?)

To rip you off, Atfxqogp Toolbar launches annoying popus, hijacks your home page, and hopes you’ll click Atfxqogp Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Atfxqogp Toolbar isn’t about being easy on its “customers.”

If you have Atfxqogp Toolbar, your search results might be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re infected with is the Atfxqogp Toolbar. Unless you like wasting money, don’t buy whatever Atfxqogp Toolbar is selling.

Read more about Atfxqogp Toolbar »


Browser Helper Object: ProtectStartPage.com

May 21st, 2008 | Posted in Browser Helper Object, Browser Hijackers, Protect Start Page com, ProtectStartPage.com, Rogue Anti Spyware

ProtectStartPage.com Threat Level: ProtectStartPage.com is a pest

ProtectStartPage.com screenshotProtectStartPage.com is a browser hijacker that changes your home page to ProtectStartPage.com. Like its twin PureSafetyHere.com, ProtectStartPage.com pimps fake anti-spyware, like AntiSpyware Shield and WinSpyKiller. ProtectStartPage.com runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This ProtectStartPage.com popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations [SIC]: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with ProtectStartPage.com. And the only thing ProtectStartPage.com and its rogue anti-spyware removes is money from your pockets.

So remove ProtectStartPage.com.

Read more about ProtectStartPage.com »


Browser Helper Object: Gktxaspm Toolbar

May 20th, 2008 | Posted in Browser Helper Object, Browser Hijackers, Gktxaspm Tool bar, GktxaspmToolbar, Rogue Anti Spyware

Gktxaspm Toolbar Threat Level: Gktxaspm Toolbar is a Pest

Gktxaspm Toolbar Gktxaspm Toolbar is the latest toolbar by Zlob Trojan, designed to trick you into buying fake anti-spyware. To scam you, Gktxaspm Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Gktxaspm Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Gktxaspm Toolbar isn’t very marketing savvy.

If you have Gktxaspm Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Gktxaspm Toolbar. Unless you like wasting money, don’t buy the software Gktxaspm Toolbar is pimping.

Read more about Gktxaspm Toolbar »


Browser Helper Object: Pvnsmfor Toolbar

May 12th, 2008 | Posted in Browser Helper Object, Browser Hijackers, Pvnsmfor Tool bar, PvnsmforToolbar, Rogue Anti Spyware

Pvnsmfor Toolbar Threat Level: Pvnsmfor Toolbar is a Pest

Pvnsmfor Toolbar Pvnsmfor Toolbar is another toolbar by Trojan Zlob, created to scare you into buying fake anti-spyware To scam you, Pvnsmfor Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Pvnsmfor Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its name makes it clear — Pvnsmfor Toolbar isn’t very marketing savvy.

If you have Pvnsmfor Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Pvnsmfor Toolbar. Unless you like wasting money, don’t buy Pvnsmfor Toolbar or the products it’s pimping.

Read more about Pvnsmfor Toolbar »


Browser Helper Object: WinSecurity Toolbar 2.1

May 8th, 2008 | Posted in Adware, Browser Helper Object, Rogue Anti Spyware, Win Security Toolbar 2.1, WinSecurity Toolbar 2.1, WinSecurity Toolbar2 1, WinSecurityToolbar 2.1, WinSecurityToolbar2.1

WinSecurity Toolbar 2.1 Threat Level: WinSecurity Toolbar 2.1 is a Threat

WinSecurity Toolbar 2.1 is a Zlob.Trojan/Trojan Zlob toolbar that watches your web activity, sends this information back to its parent, and serves you popups and link ads. WinSecurity Toolbar 2.1 may also hijack your web pages, block your URL requests, and download more pests onto your computer. Signs of WinSecurity Toolbar 2.1 include wanting to throw your computer out of the window, a little yellow triangle with an exclamation mark (!) in the bottom right corner of your screen, and tons of bad porn downloaded onto your desktop.

Wait. There’s more.

During WinSecurity Toolbar 2.1’s limited-time offering, you’ll also have a difficult time manually removing WinSecurity Toolbar 2.1, as the adware toolbar will often regenerate.

Read more about WinSecurity Toolbar 2.1 »