Home Malware Programs Adware Web Shield

Web Shield

Posted: March 31, 2014

Threat Metric

Ranking: 5,482
Threat Level: 2/10
Infected PCs: 23,269
First Seen: March 31, 2014
Last Seen: September 5, 2023
OS(es) Affected: Windows


Web Shield is an ad-supported program which may display unwanted advertisements in the form of embedded banner ads, pop-ups and context hyperlinks in the computer user's Web browser. Therefore, Web Shield may be considered to be adware. Web Shield may also change the default start page, search provider or a new tab window with Webshieldonline.com. The creators of Web Shield may claim that Web Shield may be supported by advertising, which may involve display ads (banner ads), in-text ads, interstitial ads, or other types of ads. Computer users may see random or associated ads when using their Web browsers or other applications. Web Shield may use numerous partners to deliver the most associated and highest quality ads possible, and attempt not to show ads that may be known to be pornographic, promote violence or the use of firearms or carries obscene language.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\ProgramData\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: c9ff0520f0424e66076cfe566c30b5c6
Detection count: 4,417
File type: Executable File
Mime Type: unknown/exe
Path: C:\ProgramData\WebShield\WebShieldService.exe
Group: Malware file
Last Updated: October 25, 2021
C:\Program Files (x86)\WebShield\WebShield.exe_back File name: WebShield.exe_back
Size: 349.18 KB (349184 bytes)
MD5: 9510522f0cc228dae9f112fb7382954f
Detection count: 3,019
Mime Type: unknown/exe_back
Path: C:\Program Files (x86)\WebShield\WebShield.exe_back
Group: Malware file
Last Updated: December 10, 2021
C:\Program Files (x86)\WebShield\WebShield.exe_back File name: WebShield.exe_back
Size: 345.08 KB (345088 bytes)
MD5: 1f035199b9e6c382916d3c594c8fe18b
Detection count: 1,757
Mime Type: unknown/exe_back
Path: C:\Program Files (x86)\WebShield\WebShield.exe_back
Group: Malware file
Last Updated: May 16, 2022
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: f488bfa972875d1618149e34f755a3d7
Detection count: 607
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 22, 2016
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 45.95 KB (45952 bytes)
MD5: 38d8fddc11005f8b54315830a7c0f630
Detection count: 408
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 22, 2016
%ALLUSERSPROFILE%\WebShield\WebShield.exe File name: WebShield.exe
Size: 136.57 KB (136576 bytes)
MD5: 0c05bc8b64ea23692c52ac6f45cb733e
Detection count: 194
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 22, 2016
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 539.12 KB (539128 bytes)
MD5: f6b479e847e231c6e2f595e59e6907d7
Detection count: 185
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: February 10, 2020
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 521.08 KB (521088 bytes)
MD5: ef70d5fedf8525fe488b2d8de1305ea0
Detection count: 171
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: July 9, 2016
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: a7dd274aa8655468489f87568d77a3e4
Detection count: 145
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\Application Data\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: 5aa0f3faa5dc6795d3633e487b8b71a6
Detection count: 124
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\WebShield.exe File name: WebShield.exe
Size: 136.57 KB (136576 bytes)
MD5: 814077cb0bbd97e820bdea8ad73673af
Detection count: 117
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 39.8 KB (39808 bytes)
MD5: 0bb53b649ebc3b67b07ccb09ea3183d6
Detection count: 105
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\WebShield.exe File name: WebShield.exe
Size: 136.57 KB (136576 bytes)
MD5: c2dd2ac48d68da3244473486f8b61185
Detection count: 105
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 521.08 KB (521088 bytes)
MD5: f27e532f55c6f621bc036d9a2afe72fc
Detection count: 101
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: July 9, 2016
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: a7b7619ff89694272ea000257ac01237
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
C:\ProgramData\WebShield\Uninstall.exe File name: Uninstall.exe
Size: 515.96 KB (515968 bytes)
MD5: 846d054ddddc993b650483850b9f6fca
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Path: C:\ProgramData\WebShield\Uninstall.exe
Group: Malware file
Last Updated: October 25, 2021
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 45.95 KB (45952 bytes)
MD5: fef1d71c5c3610702ea3a78480948e8f
Detection count: 87
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\WebShieldService.exe File name: WebShieldService.exe
Size: 46.97 KB (46976 bytes)
MD5: 7ef65b0de792eae0cc18ccbd1ecbf15f
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\up\2.6.78\WebShieldService.exe File name: WebShieldService.exe
Size: 65.92 KB (65920 bytes)
MD5: 221f6f4c3b7151ca3a3445b4b9feca9f
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield\up\2.6.78
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\WebShield.exe File name: WebShield.exe
Size: 136.06 KB (136064 bytes)
MD5: 69977cbb57e192bd4d8424c70d7d2ac2
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: March 30, 2016
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 515.96 KB (515968 bytes)
MD5: a19adb0ab0659cc31e43f00f47a79730
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: July 9, 2016
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 521.08 KB (521088 bytes)
MD5: c2a1daee8e7d0c29e6f53d6f045971e8
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: July 9, 2016
C:\ProgramData\webshield\WebShield.exe MD5: 2fcf4ba4694683fef76df378191c70a2 File name: C:\ProgramData\webshield\WebShield.exe MD5: 2fcf4ba4694683fef76df378191c70a2
Mime Type: unknown/exe MD5: 2fcf4ba4694683fef76df378191c70a2
Group: Malware file
C:\ProgramData\webshield\WebShieldService.exe File name: C:\ProgramData\webshield\WebShieldService.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\webshield\WebShield.exe File name: C:\ProgramData\webshield\WebShield.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\webshield\Uninstall.exe File name: C:\ProgramData\webshield\Uninstall.exe
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{351a01b5-849a-eca5-2760-ee9665e223c3}{593d67b9-3a50-ebaa-17be-61a5ec986a22}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\WebShieldService_RASAPI32SOFTWARE\Microsoft\Tracing\WebShieldService_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\WebShieldService_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\WebShieldService_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}WebShield

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\WebShield%ALLUSERSPROFILE%\WebShield%LOCALAPPDATA%\WebShield%PROGRAMFILES%\WebShield%PROGRAMFILES(x86)%\WebShield%USERPROFILE%\Local Settings\Application Data\WebShield
The following URL's were detected:
Webshieldonline.com

Related Posts

Loading...