Secure1.protection-av.com

By GoldSparrow in Rogue Websites

Translate To:

Secure1.protection-av.com aka Secure1.protection-av.net is a deceptive website created to promote My Security Shield. A browser redirection to Secure1.protection-av.com takes place due to the surreptitious modification of a victim's internet settings by Trojans associated with rogueware. If you encounter Secure1.protection-av.com ensure that you do not trust or purchase anything on the website. To stop the frequent redirection to Secure1.protection-av.com, use a legitimate anti-spyware application to remove My Security Shield.

File System Details

Secure1.protection-av.com may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	%Documents and Settings%\[UserName]\Recent\cid.dll
Name: %Documents and Settings%\[UserName]\Recent\cid.dll Type: Dynamic link library
2.	%Documents and Settings%\[UserName]\Recent\ddv.sys
Name: %Documents and Settings%\[UserName]\Recent\ddv.sys Type: System file
3.	%Documents and Settings%\[UserName]\Recent\std.exe
Name: %Documents and Settings%\[UserName]\Recent\std.exe Type: Executable File
4.	%Documents and Settings%\[UserName]\Recent\ANTIGEN.exe
Name: %Documents and Settings%\[UserName]\Recent\ANTIGEN.exe Type: Executable File
5.	%Documents and Settings%\[UserName]\Recent\ddv.dll
Name: %Documents and Settings%\[UserName]\Recent\ddv.dll Type: Dynamic link library
6.	%Documents and Settings%\[UserName]\Recent\PE.sys
Name: %Documents and Settings%\[UserName]\Recent\PE.sys Type: System file
7.	%Documents and Settings%\[UserName]\Recent\runddlkey.dll
Name: %Documents and Settings%\[UserName]\Recent\runddlkey.dll Type: Dynamic link library
8.	%Documents and Settings%\All Users\Application Data\8d7ca11\MS8d7c_2155.exe
Name: %Documents and Settings%\All Users\Application Data\8d7ca11\MS8d7c_2155.exe Type: Executable File
9.	%Documents and Settings%\[UserName]\Recent\DBOLE.sys
Name: %Documents and Settings%\[UserName]\Recent\DBOLE.sys Type: System file
10.	%Documents and Settings%\[UserName]\Recent\PE.exe
Name: %Documents and Settings%\[UserName]\Recent\PE.exe Type: Executable File
11.	%Documents and Settings%\[UserName]\Recent\tjd.sys
Name: %Documents and Settings%\[UserName]\Recent\tjd.sys Type: System file
12.	%Documents and Settings%\All Users\Application Data\8d7ca11\MSS.ico
Name: %Documents and Settings%\All Users\Application Data\8d7ca11\MSS.ico
13.	%Documents and Settings%\[UserName]\Application Data\My Security Shield\
Name: %Documents and Settings%\[UserName]\Application Data\My Security Shield\
14.	%Documents and Settings%\[UserName]\Recent\ANTIGEN.drv
Name: %Documents and Settings%\[UserName]\Recent\ANTIGEN.drv Type: Device Driver
15.	%Documents and Settings%\[UserName]\Recent\FS.drv
Name: %Documents and Settings%\[UserName]\Recent\FS.drv Type: Device Driver
16.	%Documents and Settings%\[UserName]\Recent\PE.tmp
Name: %Documents and Settings%\[UserName]\Recent\PE.tmp Type: Temporary File
17.	%Documents and Settings%\[UserName]\StartMenu\Programs\My Security Shield.lnk
Name: %Documents and Settings%\[UserName]\StartMenu\Programs\My Security Shield.lnk Type: Shortcut
18.	%Documents and Settings%\All Users\Application Data\8d7ca11\25.mof
Name: %Documents and Settings%\All Users\Application Data\8d7ca11\25.mof
19.	%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk
Name: %Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\My Security Shield.lnk Type: Shortcut
20.	%Documents and Settings%\[UserName]\Desktop\My Security Shield.lnk
Name: %Documents and Settings%\[UserName]\Desktop\My Security Shield.lnk Type: Shortcut
21.	%Documents and Settings%\[UserName]\Recent\energy.tmp
Name: %Documents and Settings%\[UserName]\Recent\energy.tmp Type: Temporary File
22.	%Documents and Settings%\[UserName]\Recent\PE.drv
Name: %Documents and Settings%\[UserName]\Recent\PE.drv Type: Device Driver
23.	%Documents and Settings%\[UserName]\StartMenu\My Security Shield.lnk
Name: %Documents and Settings%\[UserName]\StartMenu\My Security Shield.lnk Type: Shortcut
24.	%Documents and Settings%\All Users\Application Data\8d7ca11\
Name: %Documents and Settings%\All Users\Application Data\8d7ca11\
25.	%Documents and Settings%\All Users\Application Data\8d7ca11\MSSSys\vd952342.bd
Name: %Documents and Settings%\All Users\Application Data\8d7ca11\MSSSys\vd952342.bd
26.	%Documents and Settings%\[UserName]\Application Data\My Security Shield\cookies.sqlite
Name: %Documents and Settings%\[UserName]\Application Data\My Security Shield\cookies.sqlite
27.	%Documents and Settings%\[UserName]\Recent\CLSV.drv
Name: %Documents and Settings%\[UserName]\Recent\CLSV.drv Type: Device Driver
28.	%Documents and Settings%\[UserName]\Recent\gid.drv
Name: %Documents and Settings%\[UserName]\Recent\gid.drv Type: Device Driver
29.	%Documents and Settings%\[UserName]\Recent\tjd.drv
Name: %Documents and Settings%\[UserName]\Recent\tjd.drv Type: Device Driver

Registry Details

Secure1.protection-av.com may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Security Shield"

HKEY_CLASSES_ROOT\MSSSys.DocHostUIHandler

HKEY_CURRENT_USER\Software\3

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Secure1.protection-av.com

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen