Tuesday, October 16, 2007

The netadv - fake toolbar from Zlob

Gang behind Zlob malware has come up with one more smart way to trick PC users into downloading rogue anti-spyware applications and to make (more) money!

This toolbar, known as The netadv, offers various (fake) features like pop-up blocking, system security test, spyware scan, spam protection etc. Here are some screenshots of this toolbar:

All these toolbar buttons point to various rogue sites which push rogue anti-spyware applications. You are guaranteed to get new applications on almost each click! This fake toolbar also warns us about "possible" adware and spyware infection whenever we visit some "suspicious" sites. Here's one such warning issued by toolbar for Microsoft website;)

So, what happens when we click on "Click Here" link? As you might have guessed, we are taken to some randomly named rogue anti-spyware application's website:

At the time of this writing, detections for The netadv toolbar files are poor. Some info about this malware can be found here. Hopefully detections for this malware will improve soon! If your PC is infected with this malware, you may go through the CastleCops Malware Removal And Prevention to get rid of this.


Anonymous Eightbal1 said...

Thank you for your comments on DomPlayer. I was very suspicious when it said I must pay $3 USD using a mobile phone. After searching for info through dogpile.com on DomPlayer, I discovered your site which also provides great info on other scam programs. You're created a great resource site. Well Done!

4:27 PM  

Post a Comment

<< Home