Threat Database Adware Win Security Ads

Win Security Ads

By GoldSparrow in Adware

Threat Scorecard

Ranking: 17,158
Threat Level: 20 % (Normal)
Infected Computers: 1,559
First Seen: September 2, 2014
Last Seen: October 28, 2023
OS(es) Affected: Windows

The Win Security browser extension from Security Utility 1 Ltd. is advertised on Securityutility.net as been able to help Web surfers browse the Internet safer, faster and ad-free. The Win Security browser extension may use the alias Safety Keeper, and you may see it bundled with third-party software packages. What Win Security promises may attract users to install it, but it is adware and despite the beautiful blond girl on its website there is nothing appealing among its features. The Win Security adware can be linked to WebPick and Conduit that are not recommended applications. The Win Security adware may place its files in the hidden Temp folder and install several runtime DLLs to manipulate Google Chrome, Internet Explorer and Mozilla Firefox. The Win Security adware is a modified version of the Win Guard cyber threat and might use Web storage data and tracking cookies, and detect your approximate geographical location to generate tailor-suited ads. The Win Security adware may use ActionScript3 to inject additional advertisements on websites you load in your browser and redirect you to online stores that have offers on products and services in your vicinity. Moreover, the Win Security adware may record your browsing and downloading history and send that information to advertisers for creating better marketing strategies. The End-User License Agreement that comes with the Win Security adware does not mention anything related to cyber security and users should not rely on Win Security to surf safer and faster. Security analysts add that the Win Security adware does not use HTTPS encryption to connect to the Internet, and it might make your Internet activities riskier. You should purge the Win Security adware with the help of a trustworthy anti-malware instrument.

SpyHunter Detects & Remove Win Security Ads

File System Details

Win Security Ads may create the following file(s):
# File Name MD5 Detections
1. winsecurity64.dll 8b38c545b63f65f88c1b684c735b42b1 157
2. winsecurity.dll 1b963826f27b7e3150954810d79c4534 61
3. winsecurity64.dll f6e4a303d225244178f22cbff016198b 34
4. winsecurity.dll 8702ce0ccea892243e16d859d762c058 31
5. winsecurity.dll 2d0c27410b7f18538a7848229311107a 1

Registry Details

Win Security Ads may create the following registry entry or registry entries:
CLSID
{f42e9111-a9a5-4482-ad2e-1ef9da85b0bf}
Regexp file mask
%PROGRAMFILES(x86)%\WinSecurity\winsecurity.crx
%PROGRAMFILES(x86)%\WinSecurity\winsecurity.xpi
Software\Microsoft\Internet Explorer\Approved Extensions\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}
Software\Microsoft\Internet Explorer\DOMStorage\winsecurity.net
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}
SOFTWARE\Mozilla\Firefox\Extensions\{ee8cd9f6-dae3-4889-816b-99fe80dae284}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{f42e9111-a9a5-4482-ad2e-1ef9da85b0bf}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{ee8cd9f6-dae3-4889-816b-99fe80dae284}

Related Posts

Trending

Most Viewed

Loading...