How to remove webshieldfilter.sys

webshieldfilter.sys

The module webshieldfilter.sys has been detected as PUP.PCProtect

webshieldfilter.sys
Product Name:

WebShield

Company Name:

Protected.net

MD5: 7995a311533f9e8862bea1484b8c315b
Size: 74 KB
First Published: 2018-11-17 01:11:29 (6 years ago)
Latest Published: 2025-02-08 23:04:44 (4 months ago)
Status: PUP.PCProtect (on last analysis)
Analysis Date: 2025-02-08 23:04:44 (4 months ago)
Signed By: Protected Antivirus Limited
Status: Valid
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
20.5%
7.6%
6.1%
6.1%
5.0%
4.4%
4.1%
4.1%
2.9%
2.6%
2.3%
2.3%
2.0%
1.8%
1.8%
1.5%
1.5%
1.2%
1.2%
1.2%
1.2%
1.2%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
Windows 10 79.2%
Windows 7 13.7%
Windows 8.1 4.8%
Windows Server 2008 R2 0.6%
Windows Vista 0.6%
Windows XP 0.6%
Windows Server 2016 0.3%
Windows 8 0.3%
Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00011064

PE Sections:

Name Size of data MD5
.text 49152 cf2bde14a8dcfae6c1445c95c0a86a77
.rdata 2560 7bb9fc4118ba2c19e70be86842a5afe0
.data 512 043c46095689123e1f5be96c109c2f46
.pdata 1536 b305f5658a36d43e202b2aadb029cfee
INIT 2048 bb9a641596830a6f46a9193577f29acd
.rsrc 1024 9d461df4f5e52f98f4c3d02ac8764101

More information:

Download GridinSoft Anti-Malware - Removal tool for webshieldfilter.sys