OtherHomePage.com/xp/ Threat Level:

OtherHomePage.com/xp/ is the latest browser hijacker that changes your home page to OtherHomePage.com/xp/. Like its evil twin DoBrowseSecure.com/xp, OtherHomePage.com/xp/ promotes fake anti-spyware, like Ultimate Antivirus 2008 and Windows Antivirus 2008. OtherHomePage.com/xp/ runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This OtherHomePage.com/xp/ popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with OtherHomePage.com/xp/. And the only thing OtherHomePage.com/xp/ and its fake anti-spyware removes is money from your pockets.

So get rid of OtherHomePage.com/xp/.

Read more about OtherHomePage.com/xp/ »

SafePagePlace.com/xp/ Threat Level:

SafePagePlace.com/xp/ is the latest browser hijacker that changes your home page to SafePagePlace.com/xp/. Like its twin DoBrowseSecure.com/xp, SafePagePlace.com/xp/ promotes fake anti-spyware, like Ultimate Antivirus 2008 and Windows Antivirus 2008. SafePagePlace.com/xp/ runs its own fake security scan and popup, telling you you’re infected with W32.Myzor.FK@yf. This SafePagePlace.com/xp/ popup reads:

Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer.
Type: Virus
Infection Length: 138,293 bytes
Systems Affected: Windows 95, 98, ME, NT (all versions), 2003, Windows XP (all service packs)
Systems Not Affected: DOS, EPOC, Linux, Macintosh, Novell Netware, OS/2, UNIX
Technical details: Creates files in %Windir%\ directory. By default, this is C:\Windows.
Adds values to registry keys: HKEY_LOCAL_MNACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Scans the hard drive for .exe files and infects any executable files. Searches for passwords/information, which it may send to a remote attacker.
Recomendations: Click “OK” to download officially approved security software.
Always keep your patch levels up-to-date.

You’re not infected with W32.Myzor.FK@yf: you’re infected with SafePagePlace.com/xp/. And the only thing SafePagePlace.com/xp/ and its fake anti-spyware removes is money from your pockets.

So get rid of SafePagePlace.com/xp/.

Read more about SafePagePlace.com/xp/ »

SafetyIncludes.com Threat Level:

SafetyIncludes.com is a scam site that forwards to http://scan.winspywareprotectscan.com/227/509/. WinSpywareProtectScan.com is the latest home to fake anti-spyware WinSpywareProtect 7.3. WinSpywareProtectScan.com runs a “free” system scan.

What a deal.

Only the scan is fake, and WinSpywareProtectScan.com tells you you’re infected with spyware that doesn’t exist, and pops up false security alerts to trick you into buying rogue anti-spyware for about $50. This SafetyIncludes.com popup reads:

“The page at SafetyIncludes.com says:
Windows is scanning your system for threats. The scanning is provided by our official partner WinspywareProtect. Please refrain from closing the window until the scanning is finished. We highly recommend you to install the full version of Winsywareprotect scaner to monitor your PC for threats and on-time security systemupdates.”

Despite whatever WinSpywareProtectScan.com says, if you don’t remember how you got to WinSpywareProtectScan.com, the only crapware you’re infected with is–

Yep, you guessed it.

WinSpywareProtectScan.com.

Read more about SafetyIncludes.com »

StopBadware2008.com Threat Level:

StopBadware2008.com is the latest home to fake anti-spyware Antivirus 2008. StopBadware2008.com displays a scare message that reads:

Insecure Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes.
Also insecure Internet activity can result in revealing your personal information.
To get full advanced real-time protection for PC and Internet activity, register Antivirus 2008.
We recommend you to protect your PC now and continue safe Internet browsing.
Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended).

If you click to “Continue to this website unprotected,” you’re forwarded to www.Da.ru, and you get this StopBadware2008.com popup:

Continue to this website unprotected (not recommended).
Do you want to continue browsing unprotected?

If you “Click here to get full advanced real-time protection and continue browsing,” you get a few more other StopBadware2008.com popups:

Attention! Your PC may not have virus protection system. This may lead to your PC being infected.
Now your system will be scanned for security risks.
Press OK to continue.

After you press “OK”…

Antivirus 2008 will scan your system now.
Please select “RUN” or “OPEN” when prompted to start the installation.
This file has been digitally signed and independently certified as 100% free of viruses, adware and spyware.

Next, you’re forwarded to InfectionScanner.com, which launches a fake system scan to scare you into buying Antivirus 2008.

Despite whatever StopBadware2008.com says, if you don’t remember how you got to StopBadware2008.com, the only “spyware” you’re infected with is StopBadware2008.com.

Read more about StopBadware2008.com »

Nqgpedlr Toolbar Threat Level:

Nqgpedlr Toolbar is the latest toolbar by everyone’s favorite Trojan, Zlob. Nqgpedlr Toolbar was created to scare you into buying fake anti-spyware. To scam you, Nqgpedlr Toolbar pops up annoying ads, hijacks your home page, and hopes you’ll click Nqgpedlr Toolbar’s buttons for “Remove Popups, Scan Spyware, Security Test, and Spam Protection.”

Obviously, its impossible-to-pronounce name makes it clear — Nqgpedlr Toolbar isn’t exactly about pleasing its customers.

If you have Nqgpedlr Toolbar, your search results could be topped with this fake alert:

“Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware…”

Warning: the only thing you’re really infected with is Nqgpedlr Toolbar. Unless you like wasting money, don’t buy Nqgpedlr Toolbar or the products it’s pimping.

Read more about Nqgpedlr Toolbar »

DotCom Toolbar 1.0 Threat Level:

DotCom Toolbar 1.0 is a scam toolbar that might have been installed on your computer by everyone’s favorite Trojan, Zlob. Like other crapbars, DotCom Toolbar 1.0 was probably created to scare you into buying fake anti-spyware. To scam you, DotCom Toolbar 1.0 pops up annoying ads, hijacks your home page, and hopes you’ll click DotCom Toolbar 1.0’s buttons.

Unless you like wasting money, don’t buy DotCom Toolbar 1.0 or the products it’s pimping.

Read more about DotCom Toolbar 1.0 »

Online-Spy-Scanner.com Threat Level:

Online-Spy-Scanner.com is a fake anti-spyware site promoting rogue security software SpyGuarder 2.1. Online-Spy-Scanner.com simulates a fake system scan, and then sends you some “security” alerts. How thoughtful. These Online-Spy-Scanner.com popups read:

“The page at http://online-spy-scanner.com says:
Warning!!!Your computer contains various signs of viruses and malware programs presence.Your system requires immediate anti viruses check!Spy Guarder will perform a quick and free scanning of your PC for viruses and malicious programs.”

Or

“The page at http://online-spy-scanner.com says:
Your computer remains infected by viruses!They can cause data loss and file damages and need to be cured as soon as possible.Return to Spy Guarder and download it secure your PC”

Despite whatever Online-Spy-Scanner.com says, if you don’t remember how you got to Online-Spy-Scanner.com, the only spyware you’re infected with is–

Yep, you guessed it.

Online-Spy-Scanner.com.

Read more about Online-Spy-Scanner.com »

NowFixPC.com Threat Level:

NowFixPC.com is a browser hijacker that forwards to RegistryUpdate.com. RegistryUpdate.com offers a “free” system scan, using fake registry repair software Repair Registry Pro.

What a deal.

Only if you download the trial, Repair Registry Pro tells you you have registry errors that don’t exist, and pops up fake security alerts to trick you into buying Repair Registry Pro for $44.95.

Despite whatever NowFixPC.com says, if you don’t remember how you got to NowFixPC.com, the only PC problem you have is you’re infected with is Repair Registry Pro. So just remove Repair Registry Pro, before you throw your PC out the window.

Read more about NowFixPC.com »

XPSecurityCenter.com Threat Level:

XPSecurityCenter.com is home to fake anti-spyware XP SecurityCenter. XPSecurityCenter.com offers a “free” system scan, using XP SecurityCenter.

What a deal.

Only if you download the trial, XP SecurityCenter tells you you’re infected with spyware that doesn’t exist, and pops up fake security alerts to trick you into buying XP SecurityCenter for $44.95.

Despite whatever XPSecurityCenter.com says, if you don’t remember how you got to XPSecurityCenter.com, the only spyware you’re infected with is XP SecurityCenter. So just remove XP SecurityCenter, before you throw your PC out the window.

Read more about XPSecurityCenter.com »

Windows-Privacy-Protection.com Threat Level:

Windows-Privacy-Protection.com is a fake anti-spyware site promoting rogue security software SpyMaxx and AntispyStorm2008 for $49.95 each. Windows-Privacy-Protection.com offers free system scans, which will only cost you your sanity: if you download a Windows-Privacy-Protection.com scan, you’ll likely get tons of fake security alert popups.

Despite whatever Windows-Privacy-Protection.com says, if you don’t remember how you got to Windows-Privacy-Protection.com, the only spyware you’re infected with is Windows-Privacy-Protection.com.

Read more about Windows-Privacy-Protection.com »