Home Malware Programs Adware Win Security Ads

Win Security Ads

Posted: October 30, 2015

Threat Metric

Threat Level: 2/10
Infected PCs: 3,658
First Seen: September 2, 2014
Last Seen: September 25, 2024
OS(es) Affected: Windows

Win Security is not some essential service of the Windows Operating Systems (OS). This application is a typical adware that tries to boost the traffic towards particular webpages. The experts don't recommend keeping this questionable program because it may change the performance of your Web clients negatively. To redirect users to promoted domains, Win Security may create additional commercial materials. During your surfing sessions, you may encounter pop-ups, banners, interstitial ads or in-text ads consistently. The description of Win Security states that it can enhance the overall performance of browsers. However, the adware may achieve exactly the opposite because the ads may be persistent and aggressive. They may appear over a large area of your screen on most sites, which may turn out to be very annoying. Some of the ads may contain multimedia elements, whose loading may lead to a drop in the operating speed. If your computer is not too powerful or you enjoy working with a few tabs at once, you may even experience random freezes. What should be a bigger worry is the destination of the sponsored links – some of the partner pages may represent danger to your PC. The people behind Win Security also claim that it can take care of your online security by blocking phishing attacks. In reality, this tool cannot achieve this task because it is not a reliable anti-malware program. The most common distribution method of this adware is rather confusing to the users. It may travel in software bundles, which explains why some people cannot recall installing it. To stop seeing the ads by Win Security, you need to use a real and credible security program to delete the adware.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\WinSecurity\winsecurity64.dll File name: winsecurity64.dll
Size: 200.7 KB (200704 bytes)
MD5: f6e4a303d225244178f22cbff016198b
Detection count: 82
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\WinSecurity
Group: Malware file
Last Updated: September 25, 2024
%PROGRAMFILES%\WinSecurity\winsecurity.dll File name: winsecurity.dll
Size: 167.93 KB (167936 bytes)
MD5: 8702ce0ccea892243e16d859d762c058
Detection count: 75
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\WinSecurity
Group: Malware file
Last Updated: September 25, 2024

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{f42e9111-a9a5-4482-ad2e-1ef9da85b0bf}Regexp file mask%PROGRAMFILES(x86)%\WinSecurity\winsecurity.crx%PROGRAMFILES(x86)%\WinSecurity\winsecurity.xpiHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}Software\Microsoft\Internet Explorer\DOMStorage\winsecurity.netSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F42E9111-A9A5-4482-AD2E-1EF9DA85B0BF}SOFTWARE\Mozilla\Firefox\Extensions\{ee8cd9f6-dae3-4889-816b-99fe80dae284}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{f42e9111-a9a5-4482-ad2e-1ef9da85b0bf}SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\{ee8cd9f6-dae3-4889-816b-99fe80dae284}

Related Posts

Loading...