<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp" />
  <link rel="self" type="application/atom+xml" href="http://blog.tmcnet.com/blog/tom-keating/atom.xml" />
  <id>tag:blog.tmcnet.com,2013:/blog/tom-keating//4/tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-</id>
  <updated>2013-02-22T21:05:10Z</updated>
  <title>Comments for Windows Defender calls Alexa Toolbar Trojan</title>
  <subtitle>VoIP &amp; Gadgets blog - Latest news in VoIP &amp; gadgets, wireless, mobile phones, reviews, &amp; opinions</subtitle>
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 4.38</generator>
  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069</id>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp" />
    <link rel="service.edit" type="application/atom+xml" href="http://blog.tmcnet.com/mt/mt-atom.cgi/weblog/blog_id=4/entry_id=32069" title="Windows Defender calls Alexa Toolbar Trojan" />
    <published>2007-03-02T15:43:25Z</published>
    <updated>2008-04-10T21:35:12Z</updated>
    <title>Windows Defender calls Alexa Toolbar Trojan</title>
    <summary>This morning I discovered several PCs running Windows Defender and the Alexa Toolbar were receiving messages that the Alexa Toolbar was classified as a trojan. The name classfication within Windows Defender was Win32/VB.BZ as seen here: (click for large view)...</summary>
    <author>
      <name>Tom Keating</name>
      <uri>http://blog.tmcnet.com/blog/tom-keating/</uri>
    </author>
    
    <category term="Microsoft" />
    
    <category term="TMCnet" />
    
    <content type="html" xml:lang="en" xml:base="http://blog.tmcnet.com/blog/tom-keating/">
      <![CDATA[This morning I discovered several PCs running Windows Defender and the Alexa Toolbar were receiving messages that the Alexa Toolbar was classified as a trojan. The name classfication within Windows Defender was Win32/VB.BZ as seen here: (click for large view)<br />
<br />
<a href="http://blog.tmcnet.com/blog/tom-keating/images/windows-defender-alexa-large.jpg"><img alt="Windows Defender Alexa Toolbar" src="http://blog.tmcnet.com/blog/tom-keating/images/windows-defender-alexa.jpg" /></a><br />
<br />
I then tested installing the Alexa toolbar onto a brand-spanking new Windows Vista PC. As the file was downloading, Windows Defender popped up with a warning and said the risk/Alert Level was &quot;High&quot;. <br />
<br />
<img src="http://blog.tmcnet.com/blog/tom-keating/images/windows-defender-alexa-2.jpg" alt="Windows Defender Warning" /><br />
<br />
I installed the file anyway and it once again classified the Alexa Toolbar as Win32/VB.BZ, a &quot;trojan clicker&quot;, according to the results I see via a <a href="http://www.google.com/search?hl=en&amp;q=win32%2Fvb.bz">Google search</a> on Win32/VB.BZ.<br />
<br />
The files it found were C:\WINDOWS\system32\alxres.dll and C:\WINDOWS\AlxTB1.dll - legitimate Alexa files.<br />
<br />
So does Microsoft have it in for Alexa? What gives? This is a valuable tool used by millions of users to track their own traffic and their competitors traffic. Yes, it is a &quot;form&quot; of spyware since it reports your web surfing habits, but it certainly isn't a &quot;trojan clicker&quot;.&nbsp; Clearly this is a mis-classification on Microsoft's part. Also, the risk level should be &quot;Medium&quot; at worst - not &quot;High&quot;. I should add that most users that install the Alexa toolbar are aware that it reports which websites you visit .<br />
<br />
I'm going to research this some more and post more here. Stay tuned!<br />
<br />
<strong>Update:</strong><br />
One theory I have is that the actual Win32/VB.BZ &quot;TrojanClicker&quot; uses a very similar &quot;signature&quot; that Alexa does. Anti-virus and anti-spyware programs rely on signature fingerprints to identify threats. It's possible Win32/VB.BZ &quot;TrojanClicker&quot;&nbsp; was developed with a similar signature as Alexa on purpose to try and masquerade itself as the Alexa toolbar. In the process of trying to look like Alexa's signature, Microsoft Defender is probably identifying the Alexa Toolbar incorrectly.]]>
      
    </content>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:24950</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c24950" />
    <title>Comment from Gamvroudis Christos on 2007-04-10</title>
    <author>
        <name>Gamvroudis Christos</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>Hi!<br />
I recently read your post and after installing the Toolbar i faced the same problem.<br />
I would like to know if someone found i way to install the alexa toolbar on vista...<br />
Thank you in advance</p>]]>
    </content>
    <published>2007-04-10T17:46:34Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:25072</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c25072" />
    <title>Comment from MJ on 2007-04-15</title>
    <author>
        <name>MJ</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>I can't get the alexa toolbar to work on my brand new vista pc. Is it Norton that makes it to not work or is it vista? I NEED HELP to get that spanking toolbar up and running.</p>]]>
    </content>
    <published>2007-04-15T04:00:37Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:25267</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c25267" />
    <title>Comment from Sam on 2007-04-22</title>
    <author>
        <name>Sam</name>
        <uri>http://www.autivo.ca</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.autivo.ca">
        <![CDATA[<p>Hi M.J.,</p>

<p>I had the same problem, and it was McAfee blocking the Alexa toolbar .dll (can't recall the exact filename). I guess you can turn off "Adware" option to test the installation. I don't think it's vista.</p>

<p>Hope it helps!</p>

<p>Sam<br />
www.autivo.com</p>]]>
    </content>
    <published>2007-04-22T07:01:38Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:25328</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c25328" />
    <title>Comment from gio on 2007-04-23</title>
    <author>
        <name>gio</name>
        <uri>http://www.isulongseophil.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.isulongseophil.com">
        <![CDATA[<p>i just got a laptop with windows vista basic and i already installed and uninstalled alexa toolbar but it still wont work.. any help?</p>]]>
    </content>
    <published>2007-04-24T03:38:15Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:25676</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c25676" />
    <title>Comment from graham on 2007-05-18</title>
    <author>
        <name>graham</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>HI,I installed my alexa toolbar on my new pc running vista home premium, i to am having the same problem. I got talking to a hp consultant in the online chatroom they provide. He told me what is written in the article above is correct. Vista clasifies this as a trojan. If anybody has any info on how to get around this problem post it here, or, are their any alternatives?</p>

<p>Peace,</p>

<p>Graham</p>]]>
    </content>
    <published>2007-05-18T20:44:57Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:26366</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c26366" />
    <title>Comment from Sohni on 2007-06-09</title>
    <author>
        <name>Sohni</name>
        <uri>http://www.allgoodarticles.wordpress.com/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.allgoodarticles.wordpress.com/">
        <![CDATA[<p>The latest version of Windows Defender thinks that Alexa is a trojan, talk about false positives, unless, that is, Alexa has changed what they do. I think is that it is detecting it as another piece of malware<br />
</p>]]>
    </content>
    <published>2007-06-09T10:01:53Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:26512</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c26512" />
    <title>Comment from Nate on 2007-06-14</title>
    <author>
        <name>Nate</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>I have a couple of questions you may be able to help with.<br />
I have ZoneAlarm pro(?) and it also called AlexaToolbar a trojan (I let ZA delete it). Thing is, i didnt even know i had alexa toolbar, never heard of it, and i dont know what it was attached to or how i got it. Can you enlighten me?<br />
I run both firefox and IE, kind of migrating to all firefox.<br />
thanks<br />
Nate</p>]]>
    </content>
    <published>2007-06-14T18:50:57Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:27442</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c27442" />
    <title>Comment from Marcia on 2007-07-15</title>
    <author>
        <name>Marcia</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>Hi. I have NEVER installed the Alexa Toolbar- I am having problems with my computer CRASHING - After formatting & installing windows XP- then my anti spy/firewall/anti virus protection - I have NOT been connected to the net and yet when nothing but the CD is loaded - Zone Alarms tells me that I have a high risk trojan- Alexa Toolbar in my HKEY_LOCAL_MACHINE_Software Microsoft InternetExplorer Extensions ( etc etc ) Since this has popped up, I now have had my computer crash almost non stop for 4 weeks now- NOTHING but the verified windows XP CD is loaded onto the computer- yet the alexa toolbar is there- I NEVER installed it- never. At the moment I have the net ( just within the last hour) and I am now at a loss as to what to do- I have run & re run the anti spy / anti virus- My computer has been breached as the firewall TOLD me that I was sending so many emails within so many secs & this was illegal- I keep deleting it but it keeps popping back up & then my computer crashes- I have been posting help messages on OZTION ( computer forum) Mine isn't popping up as numbers but the word ALEXA TOOLBAR and it is via Zone Alarm ( not windows defender) Try them & see what they say as I can tell you, it is FAR from harmless- ( if you are unsure - check the forum at Oztion - hobals is my name there ) I thought I should let you know this- Cheers :-)</p>]]>
    </content>
    <published>2007-07-15T10:26:04Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:27869</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c27869" />
    <title>Comment from Rob on 2007-07-30</title>
    <author>
        <name>Rob</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>The Alexa toolbar seems to always find a way to install itself on my laptop (running XP). I don't need it, I don't want it, and I have never agreed to this. Any toolbar that installs itself without consent is considered Malware in my book.  </p>]]>
    </content>
    <published>2007-07-30T05:29:22Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:31431</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c31431" />
    <title>Comment from Saglik on 2007-11-27</title>
    <author>
        <name>Saglik</name>
        <uri>http://www.saglikbilgileri.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.saglikbilgileri.com">
        <![CDATA[<p>I have NEVER installed the Alexa Toolbar- I am having problems with my computer CRASHING - After formatting & installing windows XP- then my anti spy/firewall/anti virus protection - I have NOT been connected to the net and yet when nothing but the CD is loaded - Zone Alarms tells me that I have a high risk trojan- Alexa Toolbar in my HKEY_LOCAL_MACHINE_Software Microsoft InternetExplorer Extensions ( etc etc ) Since this has popped up, I now have had my computer crash almost non stop for 4 weeks now- NOTHING but the verified windows XP CD </p>

<p>Thanks.</p>]]>
    </content>
    <published>2007-11-27T15:05:45Z</published>
  </entry>

  <entry>
    <id>tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069-comment:40423</id>
    <thr:in-reply-to ref="tag:blog.tmcnet.com,2007:/blog/tom-keating//4.32069" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp"/>
    <link rel="alternate" type="text/html" href="http://blog.tmcnet.com/blog/tom-keating/microsoft/windows-defender-calls-alexa-toolbar-trojan.asp#c40423" />
    <title>Comment from Nico Nel on 2008-11-07</title>
    <author>
        <name>Nico Nel</name>
        <uri>http://www.thatsglobal.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.thatsglobal.com">
        <![CDATA[<p>How do you guys get Alexa installed in the first place (on Vista?)</p>

<p>Just going to the Alexa toolbar page tells me :<br />
The toolbar currently does not work with Windows Vista. blah blah blah.</p>

<p>I did install sparky in FireFox though.</p>]]>
    </content>
    <published>2008-11-07T08:11:08Z</published>
  </entry>

</feed>
