Feb 17

Www1.protectmy-pc.in Description:

Www1.protectmy-pc.in is a bogus scan site. It facilitates the spreading of malicious software, to be more precise – Security Antivirus rogue security product. Www1.protectmy-pc.in may get belligerent as it advances invading your computer system. If you visit that website having done nothing consciously to navigate there, you should be aware that your computer is injected with trojans which have apparently taken over your browser and some system settings. Www1.protectmy-pc.in displays something similar to a scan running in a legit-looking window. The real essence of Www1.protectmy-pc.in consists in its being a primitive html script which is predetermined to look the same way all the time. It means Www1.protectmy-pc.in displays the exact same online scanner irrespective of the computer it runs on. It’s obvious that Www1.protectmy-pc.in is a digital brainwasher that does not really reflect the overall security condition of your workstation. You are probably eager to know why that malicious thing might be happening. The answer lies on the surface – Www1.protectmy-pc.in wants you to download Security Antivirus scareware and eventually buy its full version. The program we have mentioned is one of high severity so you’d better stay away from it. In case your browser has been hijacked by Www1.protectmy-pc.in, get rid of it with the help if a reliable professional tool.

Find out if your PC is infected with Www1.protectmy-pc.in hijacker and associated scareware:

Www1.protectmy-pc.in Screenshot:

Www1.protectmy-pc.in

How to remove Www1.protectmy-pc.in hijacker manually:

To perform manual removal of Www1.protectmy-pc.in hijacker, you should do the following:

Delete Www1.protectmy-pc.in hijacker corrupt files:

  • %Documents and Settings%\All Users\Application Data\345d567\
  • %Documents and Settings%\All Users\Application Data\345d567\72.mof
  • %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
  • %Documents and Settings%\All Users\Application Data\345d567\SA345d.exe
  • %Documents and Settings%\All Users\Application Data\345d567\SAV.ico
  • %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
  • %Documents and Settings%\All Users\Application Data\345d567\BackUp
  • %Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Speed Launch.lnk
  • %Documents and Settings%\All Users\Application Data\345d567\BackUp\Adobe Reader Synchronizer.lnk
  • %Documents and Settings%\All Users\Application Data\345d567\Quarantine Items\
  • %Documents and Settings%\All Users\Application Data\345d567\SAVSys\
  • %Documents and Settings%\All Users\Application Data\345d567\SAVSys\vd952342.bd
  • %Documents and Settings%\All Users\Application Data\SADFIOPODIV\SAAKDUPV.cfg
  • %Documents and Settings%\[UserName]\Application Data\Security Antivirus
  • %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Antivirus.lnk
  • %Documents and Settings%\[UserName]\Application Data\Security Antivirus\cookies.sqlite
  • %Documents and Settings%\[UserName]\Desktop\Security Antivirus.lnk
  • %Documents and Settings%\[UserName]\Recent\ANTIGEN.drv
  • %Documents and Settings%\[UserName]\Recent\ANTIGEN.exe
  • %Documents and Settings%\[UserName]\Recent\cid.dll
  • %Documents and Settings%\[UserName]\Recent\CLSV.drv
  • %Documents and Settings%\[UserName]\Recent\DBOLE.sys
  • %Documents and Settings%\[UserName]\Recent\ddv.dll
  • %Documents and Settings%\[UserName]\Recent\ddv.sys
  • %Documents and Settings%\[UserName]\Recent\energy.tmp
  • %Documents and Settings%\[UserName]\Recent\FS.drv
  • %Documents and Settings%\[UserName]\Recent\gid.drv
  • %Documents and Settings%\[UserName]\Recent\PE.drv
  • %Documents and Settings%\[UserName]\Recent\PE.exe
  • %Documents and Settings%\[UserName]\Recent\PE.sys
  • %Documents and Settings%\[UserName]\Recent\PE.tmp
  • %Documents and Settings%\[UserName]\Recent\runddlkey.dll
  • %Documents and Settings%\[UserName]\Recent\std.exe
  • %Documents and Settings%\[UserName]\Recent\tjd.drv
  • %Documents and Settings%\[UserName]\Recent\tjd.sys
  • %Documents and Settings%\[UserName]\Start Menu\Security Antivirus.lnk
  • %Documents and Settings%\[UserName]\Start Menu\Programs\Security Antivirus.lnk
  • %Program Files%\Mozilla Firefox\searchplugins\search.xml

Remove Www1.protectmy-pc.in hijacker registry entries:

  • HKEY_CURRENT_USER\Software\3
  • HKEY_CLASSES_ROOT\SA345d.DocHostUIHandler
  • HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
  • HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=195&q={searchTerms}”
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” =”http://127.0.0.1:27777/?inj=%ORIGINAL%”
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “App/7.00195″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Security Antivirus”

Please, note that manual removal of Www1.protectmy-pc.in hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Www1.protectmy-pc.in hijacker removal tool below:

Download Www1.protectmy-pc.in Hijacker Removal Tool

Leave a Reply