Home Malware Programs Browser Hijackers Protectionband.com

Protectionband.com

Posted: August 7, 2007

Protectionband.com hijacker is a variant of Trojan.Zlob. It hijacks your homepage and redirects your IE homepage to Protectionband.com. Protectionband.com displays fake Warning messages stating that your computer is infected by W32.Myzor.fk@yf Trojan, for instance, which is not a real Trojan, and then it asks you to purchase other Trojan related rouge security programs such as, VirusProtectPro, SpyLocked, MalwareAlarm, MalwareWiped and so on. If your PC is hijacked by Protectionband.com, then all your personal and financial may be in jeopardy because Protectionband.com transfers back and forth information from the infected computer which makes it a potential for data security risk.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 gwquvw.dll
    2 pmmon .exe
    3 pmsngr.exe
    4 Protectionband.com

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}"{8d8c2387-7f80-4022-9be6-43630a969558}"="carbinyl" HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8d8c2387-7f80-4022-9be6-43630a969558}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskSchedulerHKEY..\..\..\..{RegistryKeys}"carbinyl"="{8d8c2387-7f80-4022-9be6-43630a969558}"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Loading...