PUP.WebProtect

By Domesticus in Potentially Unwanted Programs

Threat Scorecard

Ranking:	12,202
Threat Level:	20 % (Normal)
Infected Computers:	24,762

First Seen:	December 13, 2013
Last Seen:	April 22, 2024
OS(es) Affected:	Windows

PUP.WebProtect is regarded as a PUP, or Potentially Unwanted Program, because PUP.WebProtect is installed as a Web browser extension. PUP.WebProtect has the characteristics of various types of potentially harmful threats including spyware, adware and browser hijackers.

PUP.WebProtect has spyware characteristics because PUP.WebProtect may be used to gather information about the affected computer and spy on the computer user's activities. Using PUP.WebProtect, marketers may learn more about the victim in order to display targeted advertisements on the affected computer. However, the most worrying aspect of this is that the information gathered by PUP.WebProtect may be sold to a third party which may then use it to carry out identity theft, credit card fraud or a variety of other harmful tactics.
PUP.WebProtect also has characteristics of browser hijackers because PUP.WebProtect essentially hijacks the victim's Web browser in order to promote its own content. PUP.WebProtect may change the affected Web browser's homepage and default search engine. PUP.WebProtect may also cause the affected Web browser to display new tabs and windows. Most importantly, PUP.WebProtect may force the affected Web browser to visit certain websites repeatedly. This technique raises those websites' page ranking and traffic stats, resulting in enormous monetary gains at the expense of the computer user.
PUP.WebProtect is also similar to adware infections because its principal goal is to expose PC users to advertisements. PUP.WebProtect may display a huge number of advertisements on the affected Web browser. This includes disruptive pop-up windows that may appear at any time and in-text marketing. This second technique consists in highlighting text on Web pages visited by the computer user. When the mouse passes over the highlighted text, a pop-up window is displayed.

Table of Contents

Preventing PUP.WebProtect Infections

PUP.WebProtect may be bundled with low quality freeware programs. Because of this, PUP.WebProtect infections can be prevented by being careful when installing new software. Use custom installation to monitor all the components being installed and always opt out of installing any unessential component or added Web browser toolbar or extension.

SpyHunter Detects & Remove PUP.WebProtect

File System Details

PUP.WebProtect may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	PCProtect64.dll	02301d454602d0f04268332810745328	664
Name: PCProtect64.dll MD5: 02301d454602d0f04268332810745328 Size: 330.62 KB (330624 bytes) Detections: 664 Type: Dynamic link library Path: %WINDIR%\system32\PCProtect64.dll Group: Malware file Last Updated: April 22, 2024
2.	MyOSProtect64.dll	bd7ea9aecc6e518f26aec7b3da2ceb50	367
Name: MyOSProtect64.dll MD5: bd7ea9aecc6e518f26aec7b3da2ceb50 Size: 350.76 KB (350768 bytes) Detections: 367 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Web Protect\MyOSProtect64.dll Group: Malware file Last Updated: February 16, 2024
3.	WDCertInstaller.dll	237608d1877eb2a9d369764c41053153	170
Name: WDCertInstaller.dll MD5: 237608d1877eb2a9d369764c41053153 Size: 184.21 KB (184216 bytes) Detections: 170 Type: Dynamic link library Path: %PROGRAMFILES(x86)%\Web Protect\WDCertInstaller.dll Group: Malware file Last Updated: February 16, 2024
4.	PCProxyDLL.dll	6fe3ec92e563a87c493eb7a23819fdfc	143
Name: PCProxyDLL.dll MD5: 6fe3ec92e563a87c493eb7a23819fdfc Size: 827.39 KB (827392 bytes) Detections: 143 Type: Dynamic link library Path: C:\Program Files (x86)\PCTRunner\PCProxyDLL.dll Group: Malware file Last Updated: October 13, 2023
5.	pcwtc64f.sys	b5aab452c9ad325d3728f8272303d1d0	137
Name: pcwtc64f.sys MD5: b5aab452c9ad325d3728f8272303d1d0 Size: 24.06 KB (24064 bytes) Detections: 137 Type: System file Path: %PROGRAMFILES(x86)%\Web Protect\pcwtc64f.sys Group: Malware file Last Updated: February 16, 2024
6.	postcollect.exe	9b6a1af8a5a13bf8156eb83043fb9829	131
Name: postcollect.exe MD5: 9b6a1af8a5a13bf8156eb83043fb9829 Size: 48.75 KB (48756 bytes) Detections: 131 Type: Executable File Path: C:\Program Files (x86)\PCTRunner\postcollect.exe Group: Malware file Last Updated: February 16, 2024
7.	pcwtc64r.sys	2ac43a7c2355d89536012de860fe6614	122
Name: pcwtc64r.sys MD5: 2ac43a7c2355d89536012de860fe6614 Size: 37.37 KB (37376 bytes) Detections: 122 Type: System file Path: C:\Program Files (x86)\PCTRunner\pcwtc64r.sys Group: Malware file Last Updated: February 16, 2024
8.	PCCertInstaller.dll.vir	3b82bbece671402e3021c16f3c191a82	102
Name: PCCertInstaller.dll.vir MD5: 3b82bbece671402e3021c16f3c191a82 Size: 182.28 KB (182288 bytes) Detections: 102 Path: D:\Daten alte Festplatte\AdwCleaner\Quarantine\C\Program Files\Web Protect\PCCertInstaller.dll.vir Group: Malware file Last Updated: April 22, 2024
9.	RegisterMyOSProtect64.exe	dc32db1869f7fe61d94663391e3e4c1f	31
Name: RegisterMyOSProtect64.exe MD5: dc32db1869f7fe61d94663391e3e4c1f Size: 308.58 KB (308584 bytes) Detections: 31 Type: Executable File Path: C:\Program Files (x86)\PCTRunner\RegisterMyOSProtect64.exe Group: Malware file Last Updated: August 17, 2023
10.	DirectControl.exe	24294bed538ed731f65d715a2a8a4886	30
Name: DirectControl.exe MD5: 24294bed538ed731f65d715a2a8a4886 Size: 634.88 KB (634880 bytes) Detections: 30 Type: Executable File Path: C:\DirectControl.exe Group: Malware file Last Updated: January 2, 2024
11.	uninstallhelper.exe	e53252492dc13216c7faf03dfad35824	27
Name: uninstallhelper.exe MD5: e53252492dc13216c7faf03dfad35824 Size: 661.7 KB (661706 bytes) Detections: 27 Type: Executable File Path: C:\Program Files (x86)\PCTRunner\uninstallhelper.exe Group: Malware file Last Updated: October 12, 2022
12.	precollect.exe	c3d87d947ba5e16351b53db2ee2b20c1	20
Name: precollect.exe MD5: c3d87d947ba5e16351b53db2ee2b20c1 Size: 46.84 KB (46842 bytes) Detections: 20 Type: Executable File Group: Malware file Last Updated: November 4, 2022
13.	uninstaller.exe	2a2b487af1b8fe5be996d299abf703ae	19
Name: uninstaller.exe MD5: 2a2b487af1b8fe5be996d299abf703ae Size: 241.16 KB (241167 bytes) Detections: 19 Type: Executable File Path: C:\Program Files (x86)\PCTRunner\uninstaller.exe Group: Malware file Last Updated: October 12, 2022
14.	RegisterMyOSProtect.exe	946d0df78f7bc6fcaa7690956f2d8307	17
Name: RegisterMyOSProtect.exe MD5: 946d0df78f7bc6fcaa7690956f2d8307 Size: 265.58 KB (265584 bytes) Detections: 17 Type: Executable File Path: C:\Program Files\PCTRunner\RegisterMyOSProtect.exe Group: Malware file Last Updated: August 17, 2023
15.	uninstallhelper.exe	6a87eee2cfca10122dd8946cd1937957	14
Name: uninstallhelper.exe MD5: 6a87eee2cfca10122dd8946cd1937957 Size: 661.77 KB (661770 bytes) Detections: 14 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
16.	uninstallhelper.exe	4df5c55bcaecf1bd97b2e0b73270c8ae	10
Name: uninstallhelper.exe MD5: 4df5c55bcaecf1bd97b2e0b73270c8ae Size: 790.86 KB (790860 bytes) Detections: 10 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: January 16, 2020
17.	uninstallhelper.exe	a0e7f08be0f01bdb9cf3554b911d557e	8
Name: uninstallhelper.exe MD5: a0e7f08be0f01bdb9cf3554b911d557e Size: 661.76 KB (661767 bytes) Detections: 8 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: May 15, 2020
18.	uninstallhelper.exe	1b571cc3bef8605728251743d62eb6fd	5
Name: uninstallhelper.exe MD5: 1b571cc3bef8605728251743d62eb6fd Size: 661.63 KB (661639 bytes) Detections: 5 Type: Executable File Path: C:\Program Files (x86)\PCTRunner\uninstallhelper.exe Group: Malware file Last Updated: June 2, 2021
19.	uninstallhelper.exe	355564e231420fb0b3ea0f0e7042630b	3
Name: uninstallhelper.exe MD5: 355564e231420fb0b3ea0f0e7042630b Size: 661.7 KB (661701 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
20.	uninstallhelper.exe	f3c859234504a67dc7ba6f2f6248d3f7	2
Name: uninstallhelper.exe MD5: f3c859234504a67dc7ba6f2f6248d3f7 Size: 661.63 KB (661635 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
21.	WPUninstall.exe	d2a79efc00407a66ff9f86fe2321eb8d	2
Name: WPUninstall.exe MD5: d2a79efc00407a66ff9f86fe2321eb8d Size: 353.02 KB (353023 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
22.	WPUninstall.exe	bd111e804d1b60e6020d852d6950d03f	1
Name: WPUninstall.exe MD5: bd111e804d1b60e6020d852d6950d03f Size: 353.02 KB (353023 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\PCTRunner Group: Malware file Last Updated: October 2, 2014
23.	WPUninstall.exe	453ceeb6bfc9bca8dbf89213e6b6d7b2	1
Name: WPUninstall.exe MD5: 453ceeb6bfc9bca8dbf89213e6b6d7b2 Size: 353.02 KB (353023 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
24.	WPUninstall.exe	fe80a109849aeecdfa95b071125c6eaa	1
Name: WPUninstall.exe MD5: fe80a109849aeecdfa95b071125c6eaa Size: 353.02 KB (353023 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\PCTRunner Group: Malware file Last Updated: October 2, 2014
25.	PCProxyDLL.dll	6a70902f610446f57da80651ed222569	0
Name: PCProxyDLL.dll MD5: 6a70902f610446f57da80651ed222569 Size: 827.39 KB (827392 bytes) Detections: 0 Type: Dynamic link library Group: Malware file Last Updated: September 25, 2014
26.	MyOSProtect.exe	b77ddcec1c53797b3540e8218a6a3bb4	0
Name: MyOSProtect.exe MD5: b77ddcec1c53797b3540e8218a6a3bb4 Size: 602.64 KB (602644 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: November 18, 2014

More files

Registry Details

PUP.WebProtect may create the following registry entry or registry entries:

CLSID

{06FD4518-2CAB-4473-AA8D-0508134C6C1F}

{0C27B569-9410-406B-BA79-3EF654739236}

{1A86F607-D30E-46c7-A7F5-44F690F0ABB7}

{2F101D36-9749-4730-AA02-F1F8BD1193EA}

{3E4048A7-8F44-48DC-9163-16A4803F7826}

{4A55DCF1-2410-4139-A579-15DED320D84A}

{59A8D713-E25C-4c3f-AB27-44A4FEDD9328}

{632ACF93-7DAA-4CFD-8BB5-9DCBB9116176}

{6DA234CD-4043-46C6-922F-A39529AE3D4B}

{704C6F87-E9C5-44FE-B5AF-A84DB18AFB54}

{94B83936-77EA-4708-8FC5-F3BBC55C2A32}

{C64747EF-5093-48B3-A876-579B3A529C27}

{DA5534ED-88FD-49fa-9D2D-B92584CB21AC}

{DE4EF20E-BC71-4a63-BC1E-C13B37815A00}

{E2179B6D-BB95-4004-8A51-B9E8FBE9FF24}

{E3F16E3B-4C44-445B-8854-EB76DC059891}

{E3F32F05-71B6-44c5-8BEE-13D239E27E98}

Regexp file mask

%WINDIR%\System32\Drivers\pcwatch.sys

%windir%\System32\MyOSProtect.ini

%windir%\System32\MyOSProtectOff.ini

%WINDIR%\SysWOW64\MyOSProtect.ini

%WINDIR%\SysWOW64\MyOSProtectOff.ini

HKEY..\..\..\..{RegistryKeys}

SOFTWARE\Classes\AppID\MyOSProtect.EXE

Software\PCTRunner

Software\WebProtect

SOFTWARE\Wow6432Node\Classes\AppID\MyOSProtect.EXE

SOFTWARE\Wow6432Node\PCTRunner

SOFTWARE\Wow6432Node\WebProtect

SYSTEM\ControlSet001\Control\SafeBoot\Minimal\pcwatch.sys

SYSTEM\ControlSet001\Control\SafeBoot\Network\MyOSProtect

SYSTEM\ControlSet001\Control\SafeBoot\Network\PCProtect

SYSTEM\ControlSet001\Control\SafeBoot\Network\pcwatch.sys

SYSTEM\ControlSet001\services\MyOSProtect

SYSTEM\ControlSet001\services\PCProtect

SYSTEM\ControlSet001\services\pcwatch

SYSTEM\ControlSet001\services\ProtectMonitor

SYSTEM\ControlSet002\Control\SafeBoot\Minimal\pcwatch.sys

SYSTEM\ControlSet002\Control\SafeBoot\Network\MyOSProtect

SYSTEM\ControlSet002\Control\SafeBoot\Network\PCProtect

SYSTEM\ControlSet002\Control\SafeBoot\Network\pcwatch.sys

SYSTEM\ControlSet002\services\MyOSProtect

SYSTEM\ControlSet002\services\PCProtect

SYSTEM\ControlSet002\services\pcwatch

SYSTEM\ControlSet002\services\ProtectMonitor

SYSTEM\ControlSet003\Control\SafeBoot\Minimal\pcwatch.sys

SYSTEM\ControlSet003\Control\SafeBoot\Network\pcwatch.sys

SYSTEM\ControlSet003\services\pcwatch

SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\pcwatch.sys

SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MyOSProtect

SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCProtect

SYSTEM\CurrentControlSet\Control\SafeBoot\Network\pcwatch.sys

SYSTEM\CurrentControlSet\services\MyOSProtect

SYSTEM\CurrentControlSet\services\PCProtect

SYSTEM\CurrentControlSet\services\pcwatch

SYSTEM\CurrentControlSet\services\ProtectMonitor

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

wp-adinject-adk

wp-adk

wp-apl

wp-dcollect-tgu

Directories

PUP.WebProtect may create the following directory or directories:

%PROGRAMFILES%\PCTRunner

%PROGRAMFILES%\ThinkProtect

%PROGRAMFILES%\ThinkupWP

%PROGRAMFILES(x86)%\PCTRunner

%PROGRAMFILES(x86)%\ThinkProtect

%PROGRAMFILES(x86)%\ThinkupWP

URLs

PUP.WebProtect may call the following URLs:

wpplink.com

EnigmaSoft's SpyHunter Scores 100% with AV-TEST in 2024

Search

Change Region

PUP.WebProtect

Threat Scorecard

EnigmaSoft Threat Scorecard

Preventing PUP.WebProtect Infections

SpyHunter Detects & Remove PUP.WebProtect

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Uazq Ransomware

PDFSpark

Baseauthenticity.co.in

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?