Threat Database Rogue Websites Totalprotectav.com

Totalprotectav.com

By Domesticus in Rogue Websites

Totalprotectav.com is a tricky website and malicious web browser hijacker which is a supporter of a rogue anti-spyware program Total Protect. Totalprotectav.com reroutes targeted PC users to its misleading website regardless of which website you are going to visit and tries to convince you into buying bogus anti-virus software Total Protect. If Totalprotectav.com constantly appears when you attempt yo open any web page, that means a trial version of Total Protect rogueware has been installed to your computer system. Totalprotectav.com circulates via malicious websites or spam emails that include malicious Java-script or via infected files of counterfeit anti-spyware setup programs. Totalprotectav.com makes modifications to a few essential files and changes the name to hide it's detection by legitimate anti-virus software installed on your computer. Totalprotectav.com is a serious threat to personal information gathered on a compromised PC system. Totalprotectav.com and Total Protect are closely associated and always come together. Therefore, ESG's malware researchers recommend you to eliminate both of them as quickly as possible.

File System Details

Totalprotectav.com may create the following file(s):
# File Name Detections
1. C:\Documents and Settings\\Application Data\[RANDOM CHARACTERS]

Registry Details

Totalprotectav.com may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = '0'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = 'http=127.0.0.1:8992'

Trending

Most Viewed

Loading...