PUP.WebProtect
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 15,437 |
| Threat Level: | 20 % (Normal) |
| Infected Computers: | 24,809 |
| First Seen: | December 13, 2013 |
| Last Seen: | December 12, 2025 |
| OS(es) Affected: | Windows |
PUP.WebProtect is regarded as a PUP, or Potentially Unwanted Program, because PUP.WebProtect is installed as a Web browser extension. PUP.WebProtect has the characteristics of various types of potentially harmful threats including spyware, adware and browser hijackers.
- PUP.WebProtect has spyware characteristics because PUP.WebProtect may be used to gather information about the affected computer and spy on the computer user's activities. Using PUP.WebProtect, marketers may learn more about the victim in order to display targeted advertisements on the affected computer. However, the most worrying aspect of this is that the information gathered by PUP.WebProtect may be sold to a third party which may then use it to carry out identity theft, credit card fraud or a variety of other harmful tactics.
- PUP.WebProtect also has characteristics of browser hijackers because PUP.WebProtect essentially hijacks the victim's Web browser in order to promote its own content. PUP.WebProtect may change the affected Web browser's homepage and default search engine. PUP.WebProtect may also cause the affected Web browser to display new tabs and windows. Most importantly, PUP.WebProtect may force the affected Web browser to visit certain websites repeatedly. This technique raises those websites' page ranking and traffic stats, resulting in enormous monetary gains at the expense of the computer user.
- PUP.WebProtect is also similar to adware infections because its principal goal is to expose PC users to advertisements. PUP.WebProtect may display a huge number of advertisements on the affected Web browser. This includes disruptive pop-up windows that may appear at any time and in-text marketing. This second technique consists in highlighting text on Web pages visited by the computer user. When the mouse passes over the highlighted text, a pop-up window is displayed.
Table of Contents
Preventing PUP.WebProtect Infections
PUP.WebProtect may be bundled with low quality freeware programs. Because of this, PUP.WebProtect infections can be prevented by being careful when installing new software. Use custom installation to monitor all the components being installed and always opt out of installing any unessential component or added Web browser toolbar or extension.
SpyHunter Detects & Remove PUP.WebProtect
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | MyOSProtect.dll | f2e5a0cc408405c595a9cdbf854a38e1 | 3,427 |
| 2. | PCProtect64.dll | 02301d454602d0f04268332810745328 | 668 |
| 3. | MyOSProtect64.dll | bd7ea9aecc6e518f26aec7b3da2ceb50 | 368 |
| 4. | postcollect.exe.vir | 0244d0b696aa1a3bf755ba2e9356b1d5 | 178 |
| 5. | WDCertInstaller.dll | 237608d1877eb2a9d369764c41053153 | 171 |
| 6. | PCProxyDLL.dll | 6fe3ec92e563a87c493eb7a23819fdfc | 144 |
| 7. | pcwtc64f.sys | b5aab452c9ad325d3728f8272303d1d0 | 138 |
| 8. | postcollect.exe | 9b6a1af8a5a13bf8156eb83043fb9829 | 132 |
| 9. | pcwtc64r.sys | 2ac43a7c2355d89536012de860fe6614 | 123 |
| 10. | pcwatch.sys | 3182a7b614220dd26804589bd910e28d | 120 |
| 11. | PCCertInstaller.dll.vir | 3b82bbece671402e3021c16f3c191a82 | 104 |
| 12. | RegisterMyOSProtect64.exe | dc32db1869f7fe61d94663391e3e4c1f | 31 |
| 13. | DirectControl.exe | 24294bed538ed731f65d715a2a8a4886 | 30 |
| 14. | precollect.exe | c3d87d947ba5e16351b53db2ee2b20c1 | 20 |
| 15. | uninstaller.exe | 2a2b487af1b8fe5be996d299abf703ae | 19 |
| 16. | RegisterMyOSProtect.exe | 946d0df78f7bc6fcaa7690956f2d8307 | 17 |
| 17. | uninstallhelper.exe | a0e7f08be0f01bdb9cf3554b911d557e | 8 |
| 18. | wp_us_1402-6ac27449.exe | 20c8a6ad65741678811b2c237bb16945 | 5 |
| 19. | MyOSProtect.exe | b77ddcec1c53797b3540e8218a6a3bb4 | 0 |
Registry Details
Directories
PUP.WebProtect may create the following directory or directories:
| %PROGRAMFILES%\PCTRunner |
| %PROGRAMFILES%\ThinkProtect |
| %PROGRAMFILES%\ThinkupWP |
| %PROGRAMFILES(x86)%\PCTRunner |
| %PROGRAMFILES(x86)%\ThinkProtect |
| %PROGRAMFILES(x86)%\ThinkupWP |
URLs
PUP.WebProtect may call the following URLs:
| wpplink.com |
