Home Malware Programs Adware Adware.WebInternetSecurity

Adware.WebInternetSecurity

Posted: April 9, 2014

Threat Metric

Ranking: 12,373
Threat Level: 2/10
Infected PCs: 41,949
First Seen: April 9, 2014
Last Seen: October 7, 2023
OS(es) Affected: Windows


Adware.WebInternetSecurity is adware that may insert an unwanted add-on, plug-in or browser extension on the Web browsers such as Internet Explorer, Mozilla Firefox and Google Chrome. Once installed on the computer system, Adware.WebInternetSecurity may display pop-up advertisements, messages and banners carrying various online saving coupons, discount deals, sales and other offers. Adware.WebInternetSecurity may seem to be a useful tool to online shoppers. However, in fact, Adware.WebInternetSecurity may be considered to be a potentially unwanted application if it integrates itself on the PC without the computer user's approval. Adware.WebInternetSecurity may also spread and access the PC as an extra program through bundled freeware that computer users can download from unreliable download websites. Adware.WebInternetSecurity may keep track of the PC user's surfing habits and gather browsing details that may later be used with the purpose to deliver targeted advertisements. Adware.WebInternetSecurity may be created with the goal to generate advertising revenue from clicks on ads.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\Webinternetsecurity\WebInternetSecurity.exe File name: WebInternetSecurity.exe
Size: 797.18 KB (797184 bytes)
MD5: 8a0b3b8f670c7a32cdc9b1a0797396ae
Detection count: 15,446
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Webinternetsecurity
Group: Malware file
Last Updated: February 21, 2020
C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2GHAY8K\installer-wis-dl[1].exe File name: installer-wis-dl[1].exe
Size: 3.54 MB (3548160 bytes)
MD5: 294d8bf17879e177b92ab3c04233b892
Detection count: 14,109
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2GHAY8K\installer-wis-dl[1].exe
Group: Malware file
Last Updated: December 6, 2021
C:\Program Files (x86)\Webinternetsecurity\WebInternetSecurity.exe File name: WebInternetSecurity.exe
Size: 797.18 KB (797184 bytes)
MD5: 32eabdec77ee9d02ea0acde54e817a2c
Detection count: 5,832
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\Webinternetsecurity\WebInternetSecurity.exe
Group: Malware file
Last Updated: January 25, 2021
%PROGRAMFILES(x86)%\Webinternetsecurity\uninstall.webinternetsecurity.exe File name: uninstall.webinternetsecurity.exe
Size: 3.54 MB (3548160 bytes)
MD5: e9266785503519dbc15bfada8c19c40e
Detection count: 5,591
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Webinternetsecurity
Group: Malware file
Last Updated: July 19, 2020

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASAPI32SOFTWARE\Microsoft\Tracing\WebInternetSecurity_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebInternetSecurity Update TaskSOFTWARE\WebinternetsecuritySoftware\WebinternetsecurityInstalledSOFTWARE\Wow6432Node\Microsoft\Tracing\WebInternetSecurity_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\WebInternetSecurity_RASMANCSSOFTWARE\Wow6432Node\WebinternetsecurityHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Webinternetsecurity

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\WebInternetSecurity%LOCALAPPDATA%\WebInternetSecurity%PROGRAMFILES%\Webinternetsecurity%PROGRAMFILES(x86)%\Webinternetsecurity
Loading...