Home Malware Programs Adware Web Shield

Web Shield

Posted: March 31, 2014

Threat Metric

Ranking: 5,478
Threat Level: 2/10
Infected PCs: 23,711
First Seen: March 31, 2014
Last Seen: March 7, 2025
OS(es) Affected: Windows


Web Shield is an ad-supported program which may display unwanted advertisements in the form of embedded banner ads, pop-ups and context hyperlinks in the computer user's Web browser. Therefore, Web Shield may be considered to be adware. Web Shield may also change the default start page, search provider or a new tab window with Webshieldonline.com. The creators of Web Shield may claim that Web Shield may be supported by advertising, which may involve display ads (banner ads), in-text ads, interstitial ads, or other types of ads. Computer users may see random or associated ads when using their Web browsers or other applications. Web Shield may use numerous partners to deliver the most associated and highest quality ads possible, and attempt not to show ads that may be known to be pornographic, promote violence or the use of firearms or carries obscene language.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\WebShield\WebShield.exe_back File name: WebShield.exe_back
Size: 345.08 KB (345088 bytes)
MD5: 1f035199b9e6c382916d3c594c8fe18b
Detection count: 1,759
Mime Type: unknown/exe_back
Path: C:\Program Files (x86)\WebShield\WebShield.exe_back
Group: Malware file
Last Updated: July 24, 2024
%ALLUSERSPROFILE%\WebShield\uninstall.exe File name: uninstall.exe
Size: 539.12 KB (539128 bytes)
MD5: f6b479e847e231c6e2f595e59e6907d7
Detection count: 185
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield
Group: Malware file
Last Updated: February 10, 2020
%ALLUSERSPROFILE%\WebShield\up\2.6.78\WebShieldService.exe File name: WebShieldService.exe
Size: 65.92 KB (65920 bytes)
MD5: 221f6f4c3b7151ca3a3445b4b9feca9f
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\WebShield\up\2.6.78
Group: Malware file
Last Updated: March 30, 2016
%PROGRAMFILES%\WebShield\WebShield.exe File name: WebShield.exe
Size: 349.18 KB (349184 bytes)
MD5: 94872e7a2ed107e2d6d5ea628909ba0c
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\WebShield
Group: Malware file
Last Updated: July 9, 2016
C:\ProgramData\webshield\WebShield.exe MD5: 2fcf4ba4694683fef76df378191c70a2 File name: C:\ProgramData\webshield\WebShield.exe MD5: 2fcf4ba4694683fef76df378191c70a2
Mime Type: unknown/exe MD5: 2fcf4ba4694683fef76df378191c70a2
Group: Malware file
C:\ProgramData\webshield\WebShieldService.exe File name: C:\ProgramData\webshield\WebShieldService.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\webshield\WebShield.exe File name: C:\ProgramData\webshield\WebShield.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\webshield\Uninstall.exe File name: C:\ProgramData\webshield\Uninstall.exe
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{351a01b5-849a-eca5-2760-ee9665e223c3}{593d67b9-3a50-ebaa-17be-61a5ec986a22}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\WebShieldService_RASAPI32SOFTWARE\Microsoft\Tracing\WebShieldService_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\WebShieldService_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\WebShieldService_RASMANCSHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}WebShield

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\WebShield%ALLUSERSPROFILE%\WebShield%LOCALAPPDATA%\WebShield%PROGRAMFILES%\WebShield%PROGRAMFILES(x86)%\WebShield%USERPROFILE%\Local Settings\Application Data\WebShield
The following URL's were detected:
Webshieldonline.com

Related Posts

Loading...