Windows Protection

“Activate my web protection software” Hijacker Description:

The stealthy and irritating browser hijackers of Cyber Security, Alpha Antivirus, Total Security and Personal Antivirus rogue anti-spyware programs have been recently redirecting people’s online sessions to fake warning pages that read “Activate my web protection software” and insist on the user’s following the corresponding link. Some examples of such hijacking pranks are Restricteddomainhelp.com, Ieprotectionlist.com which were described on our website earlier (please, follow the links to read about these hijackers in detail). The basics of browser hijacking practices consist in trojan-powered intrusion and system modification, to a certain extent. As a result, if the PC is contaminated with these rogueware-related trojan viruses, the user’s web-surfing will undergo almost permanent (at least very frequent) browser redirections to a page that looks like the one shown on the snapshot below. That absolutely misleading warning contains the link reading “Activate my web protection software” – that’s exactly what the cyber criminals want you to click in order to get hold of your system almost irrevocably. If you push “Activate my web protection software” link, do not get too surprised to see another page that tells you to purchase the license for Alpha Antivirus or Personal Antivirus software (to be precise – it’s scamware). That’s what “Activate my web protection software” hijacker is all about. So do not invest into development of worldwide hacking; instead, remove “Activate my web protection software” hijacker (i.e. the trojan viruses related to Alpha Antivirus and Personal Antivirus malware). Please, see more information below.

Find out if your PC is infected with “Activate my web protection software” hijacker and affiliated malware (PAV rogue):

Download “Activate my web protection software” Hijacker Free Scanner with Remover

“Activate my web protection software” screenshot:

“Activate my web protection software” promoting Cyber Security screenshot:

“Activate my web protection software” promoting Alpha Antivirus screenshot:

“Activate my web protection software” promoting Total Security screenshot:

How to remove “Activate my web protection software” hijacker manually:

To perform manual removal of “Activate my web protection software” hijacker, you should do the following:

Delete “Activate my web protection software” hijacker related corrupt files:

• AlphaAntivirus.exe
• Alpha Antivirus.lnk
• Uninstall Alpha Antivirus.lnk
• %Program Files%\Alpha Antivirus
• %Documents and Settings%\All Users\Start Menu\Programs\Alpha Antivirus
• %Documents and Settings%\All Users\Application Data\Alpha Antivirus
• %Program Files%\TSC
• %Program Files%\TSC\tsc.exe
• %Program Files%\TSC\Sc2C21UvvM.exe
• %WINDOWS%\system32\winsource.dll
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\TSC.lnk
• %UserProfile%\Desktop\TSC.lnk
• %UserProfile%\Start Menu\TSC
• %UserProfile%\Start Menu\TSC\Help.lnk
• %UserProfile%\Start Menu\TSC\Registration.lnk
• %UserProfile%\Start Menu\TSC\TSC.lnk
• %Program Files%\Common Files\System\Uninstall
• %Program Files%\Common Files\System\Uninstall\Uninstall TSC.lnk
• %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus
• %UserProfile%\Application Data\Personal Antivirus\settings.ini
• %UserProfile%\Application Data\Personal Antivirus\uill.ini
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus\db
• %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
• %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
• %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %Program Files%\Personal Antivirus
• %Program Files%\Personal Antivirus\activate.ico
• %Program Files%\Personal Antivirus\Explorer.ico
• %Program Files%\Personal Antivirus\PerAvir.exe
• %Program Files%\Personal Antivirus\unins000.dat
• %Program Files%\Personal Antivirus\uninstall.ico
• %Program Files%\Personal Antivirus\working.log
• %Program Files%\Personal Antivirus\db
• %Program Files%\Personal Antivirus\db\DBInfo.ver
• %Program Files%\Personal Antivirus\db\ia080614.db
• %Program Files%\Personal Antivirus\db\ia080618x.db
• %Program Files%\Personal Antivirus\Languages
• %Program Files%\Personal Antivirus\Languages\IAEs.lng
• %Program Files%\Personal Antivirus\Languages\IAFr.lng
• %Program Files%\Personal Antivirus\Languages\IAGer.lng
• %Program Files%\Personal Antivirus\Languages\IAIt.lng
• %WINDOWS%\system32\log.txt
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Remove “Activate my web protection software” hijacker associated registry entries:

• HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
• HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Alpha Antivirus”
• HKEY_CURRENT_USER\Software\Alpha Antivirus
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alpha Antivirus
• HKEY_LOCAL_MACHINE\SOFTWARE\Alpha Antivirus

Please, note that manual removal of “Activate my web protection software” hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic “Activate my web protection software” hijacker removal tool below:

Download Activate my web protection software Hijacker Removal Tool