Prosecure-protection1.com
Prosecure-protection1.com is a malicious website that promotes the rogue anti-spyware program Personal Security. Internet users will be redirected to Prosecure-protection1.com after the computer is infected by Trojans connected to the Personal Security scam. The victim will constantly be redirected to Prosecure-protection1.com, which appears to be a legitimate warning message, claiming that the website the user has been browsing is unsafe. The warning message links users to the purchase page of Personal Security. Do not trust Prosecure-protection1.com and have Personal Security removed immediately using a reliable anti-spyware program.
File System Details
Prosecure-protection1.com may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\win32extension.dll | |
| 2. | %Program Files%\PSecurity\psecurity.exe | |
| 3. | Psecurity.exe | |
| 4. | %Program Files%\Common Files\PSecurityUninstall\Uninstall.lnk | |
| 5. | %Documents and Settings%\All Users\Start Menu\PSecurity\Help.lnk | |
| 6. | %Documents and Settings%\All Users\Start Menu\PSecurity\Security Center.lnk | |
| 7. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PSecurity.lnk | |
| 8. | %Program Files%\Common Files\PSecurityUninstall | |
| 9. | %Documents and Settings%\All Users\Start Menu\PSecurity\Computer Scan.lnk | |
| 10. | %Documents and Settings%\All Users\Start Menu\PSecurity\Registration.lnk | |
| 11. | %Documents and Settings%\All Users\Start Menu\PSecurity\Update.lnk | |
| 12. | %Program Files%\PSecurity | |
| 13. | %Documents and Settings%\All Users\Start Menu\PSecurity | |
| 14. | %Documents and Settings%\All Users\Start Menu\PSecurity\Personal Security.lnk | |
| 15. | %Documents and Settings%\All Users\Start Menu\PSecurity\Settings.lnk | |
| 16. | %UserProfile%\Desktop\Personal Security.lnk |
Registry Details
Prosecure-protection1.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinTSI 01.12.2009"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "PSecurity"
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
