Fireball Description

Fireball is an adware infection that has managed to infect more than 250 million computers around the world. This is an enormous number, a quarter of a billion computers! Fireball is designed to display pop-ups on the victim's computers. Today, PC security researchers estimate that one in five networks around the world has been infected with Fireball. It is especially distressing when one considers that Fireball has the potential to lead to serious threat infections. Malware analysts warn of the possibility of a severe threat epidemic as a result of a large number of computers already made vulnerable by Fireball.

Why The Con Artists Created Fireball?

Like most adware, Fireball is designed to hijack the victim's Web browser, changing its default search engine and tracking the victim's online activity. Fireball is linked to a digital marketing company based in Beijing that goes by the name Rafotech. One worrying aspect of Fireball is that it has the possibility of running corrupted code on the victim's computer or to allow the download of more threats onto the victim's computer. This means that Fireball has the potential to be quite a serious infection, despite the fact that it is currently being distributed as something much less serious. Fireball has the capacity to install a backdoor, which may be exploited to carry out devastating threat attacks.

The Potential Danger of Fireball

Some of the hundreds of millions of computers affected by Fireball were infected by a technique known as bundling. This involves including the installation of Fireball along with other software, especially free software downloaded from the Web. Some free programs that have been linked to the Fireball distribution include the Soso Desktop and the FVP Image Viewer. These two programs, however, are not popular in the United States or Europe particularly. Because of this, it is likely that Fireball also is being delivered using other techniques, which may include exploit kits or email attacks. The number of Fireball infections worldwide has been estimated by analyzing the domains that have been associated with Fireball redirects and connections, which may be low-quality search engines that load results from Google and Yahoo while monetizing the victim's Web traffic and delivering advertisements. Because of the use of Google and Yahoo search results being included in Fireball attacks, it is possible that these companies may be profiting from Fireball indirectly, but it is still uncertain if there is any connection with this adware scheme.

The Victims of Fireball may be Far More than We Know

By looking at traffic statistics for search engines associated with Fireball, PC security researchers have estimated that a quarter of a billion computers around the world have been compromised with Fireball. However, since not all domains associated with Fireball have been identified, it is possible that this number is still lower than the real figure. Rafotech, Fireball's developer, claims on its website that they have reached more than 300 millions of computer users. The countries that are most affected by Fireball are Brazil and India, with about 25 million of infected computers in each one of them. Infections in the United States only account for a small fraction of the Fireball attacks currently, at about 5.5 million affected computers.

Preventing Fireball Infections and Dealing with Fireball

It is unknown how unsafe Fireball is currently. While it carries out a typical adware tactic, displaying ads on affected computers and interfering with the victim's computer when browsing the Web, this is still a low-level infection. However, the extent of Fireball's reach and the fact that there is a backdoor component to Fireball makes the danger and epidemic potential of Fireball quite scary. Because of this, these attacks should be responded immediately. Use a trusted security program that is fully up-to-date and to scan your computer regularly.

Do You Suspect Your PC May Be Infected with Fireball & Other Threats? Scan Your PC with SpyHunter

SpyHunter is a powerful malware remediation and protection tool designed to help provide PC users with in-depth system security analysis, detection and removal of a wide range of threats like Fireball as well as a one-on-one tech support service. Download SpyHunter's FREE Malware Remover
Note: SpyHunter's scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware removal tool to remove the malware threats. Read more on SpyHunter. Free Remover allows you to run a one-off scan and receive, subject to a 48-hour waiting period, one remediation and removal. Free Remover subject to promotional details and Special Promotion Terms. To understand our policies, please also review our EULA, Privacy Policy and Threat Assessment Criteria. If you no longer wish to have SpyHunter installed on your computer, follow these steps to uninstall SpyHunter.

Security Doesn't Let You Download SpyHunter or Access the Internet?

Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.
If you still can't install SpyHunter? View other possible causes of installation issues.

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their PC with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your PC. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.