TitanShield

TitanShield AntiSpyware is a rogue anti-spyware product that is installed through security exploits and aggressive pop-up advertising. The program not only installs fake spyware that it then detects, it also pops up simulated Windows system error messages and other dire warnings in order to scare users into buying the product. It includes High risk threats that are typically installed without user interaction through security exploits, and can severely compromise system security. Such threats may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These threats may also collect and transmit personally identifiable information (PII) without our consent and severely degrade the performance and stability of our computer.0

General information:

Malware Name: TitanShield
Malware Type: Rogue Security Program
Company Name: TitanSheild
Company URL: http://titanshield.com/
Threat Level: High Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

TitanShield is not a roughly designed product coming straight out of the blue. It is a state-of-the-art development which came as a result of professional software developers, usability specialists, security experts, marketers and support technicians joining their efforts. The purpose behind creating TitanShield was to give us, the user, a chance to protect our system against brooding spyware infections without the necessity to obtain complicated software and hardware skills. Reliability, usability and dedication to giving maximum protection possible are the key factors which it did its best to base TitanShield on. Having spent months and even years researching spyware and the needs of common users, it implemented a number of unique features that allow TitanShield to offer more than other tools. In the constantly changing environment of today we have to create something that sets new standards. That’s how TitanShield appeared, the embodiment of innovations that bring spyware protection to a new level.

Spyware Description:

TitanShield AntiSpyware is a rogue anti-spyware product that is installed through security exploits and aggressive pop-up advertising. The program not only installs fake spyware that it then detects, it also pops up simulated Windows system error messages and other dire warnings in order to scare users into buying the product. It includes High risk threats that are typically installed without user interaction through security exploits, and can severely compromise system security. Such threats may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These threats may also collect and transmit personally identifiable information (PII) without our consent and severely degrade the performance and stability of our computer.0

Characteristics/Symptoms:

    -> False positives work as good to purchase -> False scan results -> Uses inadequate scan/detection scheme -> Uses out of date ref database0

Additional information might be found here:

google Search at Google for TitanShield
bing Search at Bing for TitanShield
yahoo Search at Yahoo for TitanShield

Processes Running:

titanshield.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\All Users\Start Menu\Programs\TitanShield Antispyware\TitanShield Antispyware.lnk 636 Shortcut
C:\Documents and Settings\All Users\Start Menu\Programs\TitanShield Antispyware\Uninstall TitanShield Antispyware.lnk 621 Shortcut
C:\Documents and Settings\sapna\Desktop\TitanShield Antispyware.lnk 624 Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\TitanShield Antispyware
C:\Program Files\TitanShield Antispyware\interface

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TitanShield Antispyware_is1 URLInfoAbout
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TitanShield Antispyware_is1 URLUpdateInfo
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TitanShield Antispyware_is1 UninstallString