My-protection.info Description

My-protection.info is a browser hijacker promoting the rogue anti-spyware application known as Fast Antivirus 2009. Due to affiliated trojans infiltrating the computer via security exploits and reconfiguring the browser settings, web-surfing activities are redirected to the My-protection.info domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover Fast Antivirus 2009.

Type: Rogue Websites

How Can You Detect My-protection.info?

My-protection.info has typically the following processes in memory:

• %Documents and Settings%\\All Users\Application Data\9adee5b\sqlite3.dll
• %UserProfile%\Recent\CLSV.dll
• %UserProfile%\Recent\energy.sys
• %UserProfile%\Recent\SICKBOY.dll
• %Documents and Settings%\\All Users\Application Data\9adee5b\mozcrt19.dll
• %UserProfile%\Recent\cid.dll
• %UserProfile%\Recent\dudl.dll
• %UserProfile%\Recent\PE.sys
• %Documents and Settings%\\All Users\Application Data\9adee5b\FastAV.exe
• %UserProfile%\Recent\ANTIGEN.sys
• %UserProfile%\Recent\ddv.dll
• %UserProfile%\Recent\gid.exe
• %UserProfile%\Recent\tempdoc.sys

My-protection.info creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Fast Antivirus 2009″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “898701124903″
• HKEY_CLASSES_ROOT\FastAV.DocHostUIHandler

Important Article Disclaimer