WinSecureAV Description

 

 

[+] Click Image to Enlarge

 

 

Cart

WinSecureAV is a fake spyware removal tool. The program infects your computer by exploiting various vulnerabilities of the software installed on your machine. It will then embed itself in the system by copying its files to system folders and adding several keys to the registry, thus ensuring that it will be launched every time you turn on your computer. Once the installation is complete, WinSecureAV will begin its routine activities. They include generating false security alerts, displaying popup advertisements and causing overall system instability. Manual removal of this application is very complicated, since the program is able to regenerate its files as they are being deleted.

Type: Spyware

Automatic Detection of WinSecureAV

WinSecureAV Technical Report

As new WinSecureAV details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following WinSecureAV files with its MD5s were created in the system:

WinSecureAV has typically the following processes in memory:

• dhlp.sys

WinSecureAV created the following directories, files, paths:

• %ProgramFiles%\Common Files\WinSecureAv
• %ProgramFiles%\WinSecureAv

WinSecureAV creates the following registry entries:

• WinSecureAv

Important Article Disclaimer