Home Malware Programs Rogue Anti-Spyware Programs VirusProtect

VirusProtect

Posted: November 13, 2007

Threat Metric

Ranking: 8,261
Threat Level: 10/10
Infected PCs: 22,344
First Seen: July 24, 2009
Last Seen: October 10, 2023
OS(es) Affected: Windows

ScreenshotVirusProtect, or VirusProtect v.3.8, is a rogue anti-spyware application designed to scare you into purchasing VirusProtect's full version with misleading warning messages that pop up on your Taskbar. VirusProtect is usually downloaded and installed via ZLOB/MediaAccess Codec installer from an adult site. Once you're infected, the Zlob Trojan will display misleading warning messages. VirusProtect warning messages claim that your computer is infected with dangerous parasites in an attempt to trick you into purchasing VirusProtect's commercial version. In addition, VirusProtect may generate annoying popup advertisements that may cause unstable system performance. VirusProtect is known to be a clone of AntiVirGear and VirusProtect Pro.

ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

Trojan.Zlob [Symantec]Small [Prevx1]Adware/AntivirusPro [Panda]TrojanDownloader:Win32/Renos.CG [Microsoft]Trojan-Downloader.Win32.Bojo.aa [F-Secure]Downloader.Bojo.aa [eWido]Win32/Crushpy.L [eTrust-Vet]Trojan.Fakealert.origin [DrWeb]Adware.Renos.XD [BitDefender]Generic9.ADJM [AVG]Win32:Bojo-H [Avast]TR/Crypt.CFI.Gen [AntiVir]TROJAN.CS [Prevx1]Adware/VideoAddon [Panda]W32/Zlob.EHX!tr [Fortinet]
More aliases (46)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



pmspl.dll File name: pmspl.dll
Size: 231.42 KB (231424 bytes)
MD5: b7fd405e749ce49f536d32d97927202d
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
pmspl.dll File name: pmspl.dll
Size: 220.67 KB (220672 bytes)
MD5: 54ca821fe5e76bcdcbd499fb07d8f098
Detection count: 92
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
vtssp.dll File name: vtssp.dll
Size: 336.48 KB (336480 bytes)
MD5: 246c924947c9fea4428d8c84694571d4
Detection count: 90
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
tvtpwp.dll File name: tvtpwp.dll
Size: 12.8 KB (12800 bytes)
MD5: a0fae0632097c90a291f7bffb962e5d7
Detection count: 84
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
ecxwp.dll File name: ecxwp.dll
Size: 12.8 KB (12800 bytes)
MD5: 7a329404de21925daacbbbee093ff6dc
Detection count: 81
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
VirusProtect_3.9.exe File name: VirusProtect_3.9.exe
Size: 1.76 MB (1765376 bytes)
MD5: 387404b0bed2641505dcd79a838a604d
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
ucmbegr.dll File name: ucmbegr.dll
Size: 12.8 KB (12800 bytes)
MD5: 9aed222181a2aa2e4da2859d870aaa9e
Detection count: 80
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
chzbi.dll File name: chzbi.dll
Size: 12.8 KB (12800 bytes)
MD5: 5ee82158796ba6bbc35c8e80efd42742
Detection count: 71
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
wygomd.dll File name: wygomd.dll
Size: 12.8 KB (12800 bytes)
MD5: 67617f63d9830e4a1d529b917da12eeb
Detection count: 70
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
bdzzzcl.dll File name: bdzzzcl.dll
Size: 12.8 KB (12800 bytes)
MD5: 020f090af370a598aa364ad41e0b9dd7
Detection count: 55
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
monem.dll File name: monem.dll
Size: 12.8 KB (12800 bytes)
MD5: 42946f6598ab398ab316038e380d8232
Detection count: 54
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
ivrllc.dll File name: ivrllc.dll
Size: 12.8 KB (12800 bytes)
MD5: bf7bb745aedd97079c09c34cad990113
Detection count: 45
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
wxinptv.dll File name: wxinptv.dll
Size: 12.8 KB (12800 bytes)
MD5: b311cd7890bc953988792878fb34da7f
Detection count: 41
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
ncrjf.dll File name: ncrjf.dll
Size: 12.8 KB (12800 bytes)
MD5: 35ee0e53ad58ea369471f60a7d41e044
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
wowlze.dll File name: wowlze.dll
Size: 12.8 KB (12800 bytes)
MD5: 04d655d046980e0edca47497577ae963
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
pmspl.dll File name: pmspl.dll
Size: 223.23 KB (223232 bytes)
MD5: 39034c522e3509eefe5aab30fe0c279b
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
uglgs.dll File name: uglgs.dll
Size: 12.8 KB (12800 bytes)
MD5: 5ed372498dc3723538c55cfcef30905f
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
rldyt.dll File name: rldyt.dll
Size: 12.8 KB (12800 bytes)
MD5: 62728d0a4f0a1efa716e05ec70737310
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: April 28, 2019
pmspl.dll File name: pmspl.dll
Size: 242.17 KB (242176 bytes)
MD5: b8f18ac046b70917a31bbd512bac0485
Detection count: 13
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
pmspl.dll File name: pmspl.dll
Size: 223.23 KB (223232 bytes)
MD5: 76464171be3137d186ff53fd2f986918
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
%WINDIR%\system32\sshnas21.dll File name: sshnas21.dll
Size: 210.94 KB (210944 bytes)
MD5: 5869e1adebcd41b84b0edcc17dc5dc5b
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: September 15, 2010
%TEMP%\Wnd.exe File name: Wnd.exe
Size: 178.68 KB (178688 bytes)
MD5: 19318e051f65a5b1a5593df467edb50a
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: September 15, 2010

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{67dc0736-075a-4647-95f5-d5421b838fed}{b0883848-1466-4470-a418-3fe7d36694b9}{c7cd9e83-3bf6-47f8-b2e2-b114c96c1888}

Additional Information

The following cookies were detected:
virprotectvirusprotect

Related Posts

Loading...