Protection Fix Site
Protection Fix Site is a browser hijacker for iPhone devices that redirects the user’s browsing and floods the screen with intrusive pop-ups and other advertising messages. Protection Fix Site can be installed on the device as a built-in component that’s been added to another app.
This type of file bundling is very commonly used for the distribution of potentially unwanted software of the browser hijacker family. No user would willingly install an app, the sole purpose of which is to spam the device’s browser with irritating advertisements and page redirects. However, if the hijacker is added to another app – one that looks more desirable and that offers the user some helpful features, then it is far more likely for people to get software like Protection Fix Site installed on their devices, oftentimes without even realizing it.
Once the hijacker gets installed, it starts to tamper with the search engine and the homepage of the device’s Chrome, Safari or other browser, seeking to change them and then use them for the generation of ads and page redirects. The main goal of this app is to generate income through the display of paid advertisements and through redirecting the user to sites that pay commission to get popularized. Here, techniques such as Pay-Per-View and Pay-Per-Click dictate the behavior of the hijacker, which is part of the reason why apps like Protection Fix Site tend to be so aggressive with their advertisements.
The worst part is that you can’t be sure if the content promoted by hijackers like Protection Fix Site is safe. For all you know, the sites that the unwanted app tries to redirect you to could be filled with dangerous Trojans, Ransomware viruses, or spyware infections. Therefore, it is always important to remove such apps from the device as quickly as possible, once you notice their presence there. Uninstallation instructions for Protection Fix Site can be found in the following removal guide – you are advised to use them if the hijacker is presently on your device.
Protection Fix Site Removal
This is the first thing you should try if you are getting targeted by this kind of spam.
- Log in yo your account at iCloud.com and tap on Calendar.
- Tap on the Settings icon (a gear icon) located in the lower-left corner of the screen.
- Now, select Preferences and then Advanced.
- Change the Invitations setting from In-app notifications to Email to and provide your current email.
- Lastly, click on Save to confirm the change.
Note that after you do that, you will no longer get any events automatically added to your Calendar. Instead, they’d go to the email you have provided. This also applies to the spam you’ve been getting – it would too go to your email, but at least you won’t be getting the spam notifications on your screen.
The next part of this post will tell you how to check your iPhone for an actual Calendar spam virus and how to deal with such a virus if it gets detected.
First you need to close all pop-ups that are currently open.
- If the pop-up has a checkbox named “Don’t show more alerts from this webpage” click on the checkbox before closing the Ad.
- If a Block Alerts button happens to appear after you shut down a pop-up on your iPhone, iPad, or iPod touch tab that button to stop receiving alerts from the same page.
In case that a pop-up fails to close after performing the above operations:
- On your Mac you should make your Safari browser close forcibly by pressing Command-Option-Esc. Select Safari from the list of Apps and force close it. After you force close it you need to restart Safari, but please hold the shift button while it starts. This will prevent any pesky Ads from opening automatically.
- On your iPhone, iPad, or iPod touch you can do the same by pressing the home button twice in a quick succession. You’ll then see a preview of all apps that have been recently used. Swipe left to find Safari and then swipe up on the app’s preview to close it forcibly In order to prevent Safari from opening unwanted windows on startup go to Settings->Safari and Clear History, as well as Website Data. This will also clear your browser history and cookies so keep that in mind and export them if you want to keep them.
Choose Preferences from the Safari menu. Then do the following:
- Select the Security icon and then click on “Block pop-up windows“. This should stop many types of pop-ups from appearing.
- Next check on your homepage and the settings for the search engines. Adware likes messing with those. We can not provide more specific instructions for this, as you may be using many different browsers.
- Select the General icon and look at the Homepage field. It should either be empty or filled with the address of the Homepage you want.
- Follow up on the Search icon. Again it should be either the default search engine or any that you have set for yourself. Note that in some versions of Safari these settings are found in the General panel/
Open Safari and click on the Extensions button. Note that Adware use extensions almost exclusively to inject the pop-up Ads into your browser. Any extension on this list that you do not remember installing yourself is likely planted there by the Adware. Remove ALL extensions you are unfamiliar with.
|Name||Protection Fix Site|
|Danger Level||Medium (nowhere near threats like Ransomware, but still a security risk)|
|Symptoms||A Hijacker would install a new search engine service in the browser and use it to redirect your searches to advertised sites.|
|Distribution Method||The method that is most commonly used to spread apps like XXX is called software bundling.|