Web Protect License

from Montiera Technologies LTD

Remove Web Protect License by Montiera Technolo...

What is Web Protect License?

WebProtect is a potentially unwanted software program ads a default home page and search engine provider to the user's web browser and protects the settings in order to collect search revenues. It also tracks the user's searching and web browsing behaviors by tracking the search terms the users enters and web pages and domains the user visits and reports back to a remote server at reports.montiera.com.

In Internet Explorer, WebProtect adds a Zone mapping to prevent IE from blocking its requests as well as disables any installed proxy server. It also connects to cnfg.toolbarservices.com through a schedules task it creates called Web Protect License that triggers the action C:\Documents and Settings\Administrator\Application Data\webprotect\webprotect\1.3.11.0\webprotect.exe\"" /sc minute /mo 10

Overview

It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The primary executable is named webprotect.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 3 files and is usually about 853.94 KB (874,430 bytes).

Malware detected in the program
Automatically starts with Windows
Typically distributed through a pay-per-install bundle
May modify the web browser's home page
The wisdom of the experts agree, if you don't use it you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in Web Protect License.

webprotect.exe (d6cce6da966ae5860f6fdd099ca5fd12) has been flagged by the following 17 scanners:
Anti-Virus software	Version	Detection
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.Montiera
AVG	2015.0.3285	Montiera
AVware	1.5.0.21	Montiera (fs)
Baidu-International	4.0.3.141120	Adware.Win32.Montiera.aZ
ESET-NOD32	8.10700	a variant of Win32/Toolbar.Montiera.Q
Fortinet FortiGate	11/20/2014	Riskware/Montiera
IKARUS anti.virus	t3scan.1.8.3.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	13.185.13965	Trojan
K7GW	13.185.13965	Trojan ( 004a07831 )
Kaspersky	14.0.0.2920	not-a-virus:WebToolbar.Win32.Montiera
Kingsoft AntiVirus	331020.49267	Win32.Troj.Montiera.j.(kcloud)
Malwarebytes	v2014.11.20.01	PUP.Optional.PayByAds.A
McAfee	5600.6941	Artemis!D6CCE6DA966A
McAfee-GW-Edition	7.6941	Artemis
Sophos	4.98	PayByAds
TrendMicro-HouseCall	7.2.324	Suspicious_GEN.F47V0811
VIPRE Antivirus	34676	Montiera (fs)

View all 17 all detections

Web Protect License has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Web Protect for Windows by Web Protect

Program details

Displayed publisher: webprotect

Installation folder: C:\users\user\appdata\local\webprotect\webprotect\1.3.11.0

Uninstaller: "C:\users\user\appdata\Local\webprotect\webprotect\1.3.11.0\webprotect.exe" /uninstl

Estimated size: 853.94 KB

Files installed by Web Protect License

Program executable:	webprotect.exe (Malware detected)
Path:	C:\users\user\appdata\local\webprotect\webprotect\1.3.11.0\webprotect.exe
MD5:	d6cce6da966ae5860f6fdd099ca5fd12

Additional files:

chrmXtn.dll
ffxtn.dll

Behaviors exhibited

Scheduled Task

webprotect.exe is scheduled as a task named 'Web Protect License' (Next runs on 8/29/2014 at 7:35 AM).

Startup File (User Run)

webprotect.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'webprotect' and executes as C:\users\user\appdata\Local\webprotect\webprotect\1.3.11.0\webprotect.exe.

How do I remove Web Protect License?

You can uninstall Web Protect License from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program Web Protect License, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove Web Protect License.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.