Threat Database Adware Netutils Ads

Netutils Ads

By GoldSparrow in Adware

Threat Scorecard

Ranking: 14,613
Threat Level: 80 % (High)
Infected Computers: 582
First Seen: August 24, 2016
Last Seen: September 20, 2023
OS(es) Affected: Windows

We have received reports that a suspicious program named Netutils is traveling with freeware bundles and not appearing on the 'Control Panel' when installed. Its investigation revealed that the Netutils program exhibits the behavior of adware. Security experts recommend users to explore the 'Advanced' and 'Typical' option of installers to make sure they do not install the Netutils software. The Netutils adware is known to promote the PC Speed Up rogue anti-spyware program. The Netutils adware appears to serve as a proxy that redirects users to a page where they can download and buy a license for PC Speed Up.

Computer users that are infected with the Netutils adware may notice netutils.exe running in the background by opening Windows Task Manager. The Netutils adware is designed to open new tab pages in your browser and switch the focus to a dialog box that says 'Your computer might not be protected, proceed to install a protection service!' The Netutils adware can detect your approximate location by reading information like your keyboard layout and IP address. That way the dialog boxes by Netutils can be translated into your native language.

The new tabs opened by Netutils may be titled Windows 7 PC Repair and urge users to click on a big green button to download PC Speed Up. The 'Windows 7 PC Repair' new tab may play an audio alert and bring up another pop-up box saying:

'Download the PC Repair Utility to scan and identify Windows Errors on Windows 7. Update your PC and eliminate potential threats.'

Security experts note that the Netutils adware will use phishing pages that feature logos from the Microsoft's official support portal to convince users that PC Speed Up is a safe program. Moreover, the URL of the 'Windows 7 PC Repair' new tab will look like:

hXXp://windows.com----support.site/windows/security/scan/virus
hXXp://windows.com----support.site/Windows/Security/Scan/Warning

Computer users are strongly advised against following instructions by the Netutils adware. The Netutils may open new tabs on your screen, but it cannot damage your OS. The Netutils adware may have installed its files in the AppData hidden directory where program configuration files are stored. Manual removal of the Netutils adware is not encouraged because you may delete the user settings in AppData accidentally. You might want to use a credible anti-malware utility to remove the Netutils effortlessly.

Trending

Most Viewed

Loading...