Windows Defender calls Alexa Toolbar Trojan

This morning I discovered several PCs running Windows Defender and the Alexa Toolbar were receiving messages that the Alexa Toolbar was classified as a trojan. The name classfication within Windows Defender was Win32/VB.BZ as seen here: (click for large view)

Windows Defender Alexa Toolbar

I then tested installing the Alexa toolbar onto a brand-spanking new Windows Vista PC. As the file was downloading, Windows Defender popped up with a warning and said the risk/Alert Level was "High".

Windows Defender Warning

I installed the file anyway and it once again classified the Alexa Toolbar as Win32/VB.BZ, a "trojan clicker", according to the results I see via a Google search on Win32/VB.BZ.

The files it found were C:\WINDOWS\system32\alxres.dll and C:\WINDOWS\AlxTB1.dll - legitimate Alexa files.

So does Microsoft have it in for Alexa? What gives? This is a valuable tool used by millions of users to track their own traffic and their competitors traffic. Yes, it is a "form" of spyware since it reports your web surfing habits, but it certainly isn't a "trojan clicker".  Clearly this is a mis-classification on Microsoft's part. Also, the risk level should be "Medium" at worst - not "High". I should add that most users that install the Alexa toolbar are aware that it reports which websites you visit .

I'm going to research this some more and post more here. Stay tuned!

Update:
One theory I have is that the actual Win32/VB.BZ "TrojanClicker" uses a very similar "signature" that Alexa does. Anti-virus and anti-spyware programs rely on signature fingerprints to identify threats. It's possible Win32/VB.BZ "TrojanClicker"  was developed with a similar signature as Alexa on purpose to try and masquerade itself as the Alexa toolbar. In the process of trying to look like Alexa's signature, Microsoft Defender is probably identifying the Alexa Toolbar incorrectly.
| 11 Comments | 0 TrackBacks

Listed below are links to sites that reference Windows Defender calls Alexa Toolbar Trojan:

Windows Defender calls Alexa Toolbar Trojan TrackBack URL : http://blog.tmcnet.com/mt/mt-tb.cgi/31979

11 Comments

| Reply

Hi!
I recently read your post and after installing the Toolbar i faced the same problem.
I would like to know if someone found i way to install the alexa toolbar on vista...
Thank you in advance

I can't get the alexa toolbar to work on my brand new vista pc. Is it Norton that makes it to not work or is it vista? I NEED HELP to get that spanking toolbar up and running.

Hi M.J.,

I had the same problem, and it was McAfee blocking the Alexa toolbar .dll (can't recall the exact filename). I guess you can turn off "Adware" option to test the installation. I don't think it's vista.

Hope it helps!

Sam
www.autivo.com

i just got a laptop with windows vista basic and i already installed and uninstalled alexa toolbar but it still wont work.. any help?

HI,I installed my alexa toolbar on my new pc running vista home premium, i to am having the same problem. I got talking to a hp consultant in the online chatroom they provide. He told me what is written in the article above is correct. Vista clasifies this as a trojan. If anybody has any info on how to get around this problem post it here, or, are their any alternatives?

Peace,

Graham

The latest version of Windows Defender thinks that Alexa is a trojan, talk about false positives, unless, that is, Alexa has changed what they do. I think is that it is detecting it as another piece of malware

I have a couple of questions you may be able to help with.
I have ZoneAlarm pro(?) and it also called AlexaToolbar a trojan (I let ZA delete it). Thing is, i didnt even know i had alexa toolbar, never heard of it, and i dont know what it was attached to or how i got it. Can you enlighten me?
I run both firefox and IE, kind of migrating to all firefox.
thanks
Nate

Hi. I have NEVER installed the Alexa Toolbar- I am having problems with my computer CRASHING - After formatting & installing windows XP- then my anti spy/firewall/anti virus protection - I have NOT been connected to the net and yet when nothing but the CD is loaded - Zone Alarms tells me that I have a high risk trojan- Alexa Toolbar in my HKEY_LOCAL_MACHINE_Software Microsoft InternetExplorer Extensions ( etc etc ) Since this has popped up, I now have had my computer crash almost non stop for 4 weeks now- NOTHING but the verified windows XP CD is loaded onto the computer- yet the alexa toolbar is there- I NEVER installed it- never. At the moment I have the net ( just within the last hour) and I am now at a loss as to what to do- I have run & re run the anti spy / anti virus- My computer has been breached as the firewall TOLD me that I was sending so many emails within so many secs & this was illegal- I keep deleting it but it keeps popping back up & then my computer crashes- I have been posting help messages on OZTION ( computer forum) Mine isn't popping up as numbers but the word ALEXA TOOLBAR and it is via Zone Alarm ( not windows defender) Try them & see what they say as I can tell you, it is FAR from harmless- ( if you are unsure - check the forum at Oztion - hobals is my name there ) I thought I should let you know this- Cheers :-)

The Alexa toolbar seems to always find a way to install itself on my laptop (running XP). I don't need it, I don't want it, and I have never agreed to this. Any toolbar that installs itself without consent is considered Malware in my book.

I have NEVER installed the Alexa Toolbar- I am having problems with my computer CRASHING - After formatting & installing windows XP- then my anti spy/firewall/anti virus protection - I have NOT been connected to the net and yet when nothing but the CD is loaded - Zone Alarms tells me that I have a high risk trojan- Alexa Toolbar in my HKEY_LOCAL_MACHINE_Software Microsoft InternetExplorer Extensions ( etc etc ) Since this has popped up, I now have had my computer crash almost non stop for 4 weeks now- NOTHING but the verified windows XP CD

Thanks.

How do you guys get Alexa installed in the first place (on Vista?)

Just going to the Alexa toolbar page tells me :
The toolbar currently does not work with Windows Vista. blah blah blah.

I did install sparky in FireFox though.

Leave a comment

Recent Activity

Today

  • Tom Keating queued The Blind Side

Sunday

Sunday

  • Tom Keating tweeted, "Moving a Data Center: Moving a data center can be fun. Yes, if you enjoy being up from 6am (Friday) to 2am (Satur... http://bit.ly/cX6L0j"
  • Tom Keating posted Moving a Data Center

Friday

  • Tom Keating tweeted, "Tearing down TMC's entire network infrastructure. My sweet beautiful network! [sniff] [sniff]"

Thursday

  • Tom Keating tweeted, "why the heck am I still awake when I have an all-nighter tomorrow moving the entire #TMCNet data center? (www.tmcnet.com) fun fun!"
  • Tom Keating tweeted, "No, Gremlins Didn't Eat TMCNet's Web Servers: Starting tomorrow around 7am, TMC will be shutting down its entire d... http://bit.ly/bS3OOn"

More...

Recent Comments

  • Peter Radizeski: I'm not certain that is accurate. The staff for VON read more
  • טכנאי מחשבים: Fast, organized, thorough, non-intrusive, and free! THANKS AVG. read more
  • SomeGuy: I've had sipgate setup for less than 24 hours on read more
  • Uverse instaler: Being a uverse installer in the StL area, I can read more
  • Roger: Dan did you find out what the music is?? I read more
  • VoIP Spear: I don't think this site is active anymore. You can read more
  • Mamrez: Hi guys , I'm looking for cracked MOBILELOG for iphone read more
  • Symplicity: Works amazing thanks :) read more
  • wirefly customer: I got my phone from wirefly and it turned out read more
  • Maher: Dear Sir, I am looking for a slim credit card read more

Subscribe to Blog

Recent Entry Images

  • apple-ipad.jpg
  • google-nexus-one.jpg
  • freetalk-connect.jpg
  • freetalk-connect.jpg
  • calliflower-skype.jpg
  • itexpo-logo.jpg

Entry Archives

Around TMCnet Blogs

  • Communications and Technology Blog - Tehrani.com:
    Apple Antitrust Issues
  • On Rad's Radar?:
    Endstream Plans
  • VoIP & Gadgets Blog:
    Moving a Data Center
  • Communications and Technology Blog - Tehrani.com:
    IfByPhone Interview ITEXPO East 2010 Miami
  • First Coffee:
    Frost & Sullivan Webcast, LCEC and ENERGYprism, IDC for
  • On Rad's Radar?:
    Freeside's new CEO
  • The Readerboard:
    Tune In, Call in (And Donate), 'Hope for Haiti
  • VoIP & Gadgets Blog:
    No, Gremlins Didn't Eat TMCNet's Web Servers
  • Latest Whitepapers

    TMCnet Videos