Netutils Ads
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
Ranking: | 14,613 |
Threat Level: | 80 % (High) |
Infected Computers: | 582 |
First Seen: | August 24, 2016 |
Last Seen: | September 20, 2023 |
OS(es) Affected: | Windows |
We have received reports that a suspicious program named Netutils is traveling with freeware bundles and not appearing on the 'Control Panel' when installed. Its investigation revealed that the Netutils program exhibits the behavior of adware. Security experts recommend users to explore the 'Advanced' and 'Typical' option of installers to make sure they do not install the Netutils software. The Netutils adware is known to promote the PC Speed Up rogue anti-spyware program. The Netutils adware appears to serve as a proxy that redirects users to a page where they can download and buy a license for PC Speed Up.
Computer users that are infected with the Netutils adware may notice netutils.exe running in the background by opening Windows Task Manager. The Netutils adware is designed to open new tab pages in your browser and switch the focus to a dialog box that says 'Your computer might not be protected, proceed to install a protection service!' The Netutils adware can detect your approximate location by reading information like your keyboard layout and IP address. That way the dialog boxes by Netutils can be translated into your native language.
The new tabs opened by Netutils may be titled Windows 7 PC Repair and urge users to click on a big green button to download PC Speed Up. The 'Windows 7 PC Repair' new tab may play an audio alert and bring up another pop-up box saying:
'Download the PC Repair Utility to scan and identify Windows Errors on Windows 7. Update your PC and eliminate potential threats.'
Security experts note that the Netutils adware will use phishing pages that feature logos from the Microsoft's official support portal to convince users that PC Speed Up is a safe program. Moreover, the URL of the 'Windows 7 PC Repair' new tab will look like:
hXXp://windows.com----support.site/windows/security/scan/virus
hXXp://windows.com----support.site/Windows/Security/Scan/Warning
Computer users are strongly advised against following instructions by the Netutils adware. The Netutils may open new tabs on your screen, but it cannot damage your OS. The Netutils adware may have installed its files in the AppData hidden directory where program configuration files are stored. Manual removal of the Netutils adware is not encouraged because you may delete the user settings in AppData accidentally. You might want to use a credible anti-malware utility to remove the Netutils effortlessly.
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.