Home Malware Programs Adware WinWeb Protection

WinWeb Protection

Posted: January 16, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 1,724
First Seen: January 16, 2014
Last Seen: November 23, 2024
OS(es) Affected: Windows


WinWeb Protection is adware that may spread and be installed on a computer system without a PC user's permission and knowledge. When installed, WinWeb Protection may display annoying pop-up messages and advertisements on the screen of the PC. WinWeb Protection may embed an unwanted add-on or plug-in on a Web browser. WinWeb Protection may forcibly redirect computer users to unreliable websites including Winwebprotection.info that were designed to possibly make money from raised sponsored website traffic and clicks on ads. WinWeb Protection may modify the default browser settings and, thus, replace the start page, search engine or a new tab window with a suspicious website. WinWeb Protection may propagate and enter the computer through bundled freeware that PC users can download on the Internet.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\Datos de programa\winweb protection\winwebprotectionSvc.dll File name: winwebprotectionSvc.dll
Size: 184.65 KB (184656 bytes)
MD5: b8dfae7a84d145121ae215af279ca3f4
Detection count: 92
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Datos de programa\winweb protection
Group: Malware file
Last Updated: January 17, 2014
%ALLUSERSPROFILE%\WinWeb protection\WinWebprotection_x64.dll File name: WinWebprotection_x64.dll
Size: 4.39 MB (4392448 bytes)
MD5: 9b65fb59c1f693eebea8d39f56ad117c
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WinWeb protection
Group: Malware file
Last Updated: January 17, 2014
%ALLUSERSPROFILE%\WinWeb protection\WinWebprotection.dll File name: WinWebprotection.dll
Size: 4.12 MB (4121088 bytes)
MD5: fd235026c6fb943200688100261d6037
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\WinWeb protection
Group: Malware file
Last Updated: January 17, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_89f7ebe4SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{89f7ebe4}SOFTWARE\Wow6432Node\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_89f7ebe4SOFTWARE\Wow6432Node\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\89f7ebe4SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}\_89f7ebe4SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}\89f7ebe4

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\WinWeb protection
Loading...