How to remove webshieldfilter.sys

webshieldfilter.sys

The module webshieldfilter.sys has been detected as PUP.PCProtect

webshieldfilter.sys
Remove webshieldfilter.sys

File Details

Product Name:

WebShield
Company Name:

Protected.net
MD5: c742e0f1541924e2f1fcbd72258b666b
Size: 68 KB
First Published: 2018-11-17 01:11:28 (7 years ago)
Latest Published: 2025-02-08 23:02:30 (9 months ago)
Status: PUP.PCProtect (on last analysis)
Analysis Date: 2025-02-08 23:02:30 (9 months ago)

Overview

Signed By: Protected Antivirus Limited
Status: Valid

Common Places:

%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi
%programfiles%\totalav\urldrv\tdi

Geography:

19.6%
7.9%
6.8%
5.7%
4.4%
4.4%
4.1%
3.8%
3.0%
2.5%
2.2%
2.2%
2.2%
1.9%
1.6%
1.4%
1.4%
1.4%
1.1%
1.1%
1.1%
1.1%
1.1%
1.1%
1.1%
0.8%
0.8%
0.8%
0.8%
0.8%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 75.9%
Windows 7 13.5%
Windows 8.1 4.5%
Windows XP 3.7%
Windows Vista 1.3%
Windows Server 2008 R2 0.5%
Windows Server 2016 0.3%
Windows 8 0.3%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0000b73e

PE Sections:

Name Size of data MD5
.text 39808 37e5fdf6cd2c34778ab4928f1a264d7b
.rdata 640 9e295666bafb5b1c9df2cc6b83042043
.data 5248 a3f3d60dcd4fe2a41c7f6f03b700d483
INIT 1664 7a58c67c08a3f70036ecaf8fb907b51c
.rsrc 1024 8a62ec1f2a0823e6d0b5e6c414f37f77
.reloc 2688 6ca5522654fc0361883dcbfad71df3f4

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for webshieldfilter.sys
copyright for information about webshieldfilter.sys