English 
My Protection.info My-protection.info
By
LoneStar in 
Loading ...
My-protection.info Description
My-protection.info is a browser hijacker promoting the rogue anti-spyware application known as Fast Antivirus 2009. Due to affiliated trojans infiltrating the computer via security exploits and reconfiguring the browser settings, web-surfing activities are redirected to the My-protection.info domain. Once here, the computer is subject to a fake online scan that displays fictitious and sometimes grossly exaggerated infection results, all in order to intimidate the user into purchasing the fake spyware remover Fast Antivirus 2009.
Type: Rogue Websites
Automatic Detection of My-protection.info
My-protection.info has typically the following processes in memory:
- %Documents and Settings%\\All Users\Application Data\9adee5b\sqlite3.dll
- %UserProfile%\Recent\CLSV.dll
- %UserProfile%\Recent\energy.sys
- %UserProfile%\Recent\SICKBOY.dll
- %Documents and Settings%\\All Users\Application Data\9adee5b\mozcrt19.dll
- %UserProfile%\Recent\cid.dll
- %UserProfile%\Recent\dudl.dll
- %UserProfile%\Recent\PE.sys
- %Documents and Settings%\\All Users\Application Data\9adee5b\FastAV.exe
- %UserProfile%\Recent\ANTIGEN.sys
- %UserProfile%\Recent\ddv.dll
- %UserProfile%\Recent\gid.exe
- %UserProfile%\Recent\tempdoc.sys
My-protection.info creates the following registry entries:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Fast Antivirus 2009″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “898701124903″
- HKEY_CLASSES_ROOT\FastAV.DocHostUIHandler
Important Article Disclaimer
This entry was posted
on 06/22/09 and is filed under Rogue Websites.
You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
