Remove ProtectionWays.com - ProtectionWays.com Removal Tool
Published by admin November 17th, 2007 in Main, Adware, Malware, Hijackers
ProtectionWays.com is a dangerous homepage hijacker that can be installed by Zlob or Looksky trojans. It generates fake warnings announcing Myzor.FK@yf infection and directing users to fake security web-sites with the rogue anti-spyware software. ProtectionWays.com may popup system tray notifications “baloons” and flashing icons to scare users and force them to download other parasites. This hijacker may damage your computer and steal personal data. Download ProtectionWays.com removal tool to get rid of this malware.
ProtectionWays.com behaviour:
- Excessive popups
- Slow computer
- Registry errors
- Data thefts
- Homepage hijackings
ProtectionWays.com system tray messages:
- “Critical System Error”,
- “Your computer is infected”,
- “Trojan-Spy.win32@mx”,
- “Virus Alert”,
- “Security Alert”
- “System Alert”
- “Spyware.Cyberlog-X
ProtectionWays.com screenshots:
Windows Vista
Windows XP and others
ProtectionWays.com manual removal instructions:
Delete ProtectionWays.com processes, files and folders:
isamini.exe
isamonitor.exe
pmmon.exe
pmsngr.exe
iesplugin.dll
iesuninst.exe
isaddon.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
pmsngr.exe
pmuninst.exe
gtawclv.dll
vjxwnn.dll
khtbpdl.dll
cfqbw.dll
fdpzgi.dll
vmlwp.dll
veptlh.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{80ced3d6-ece9-48ba-8df8-2503d8d87c2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Messenger Service
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper objects\{D61D7E1A-6613-49CA-B6F9-51DB248E209D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
