SpyProtector
SpyProtector is a rogue security program that shows false Warning messages.It also shows misleading scan Results.
General information:
| Malware Name: |
SpyProtector |
| Malware Type: |
Rogue Security Program |
| Company Name: |
Spy Protector |
| Company URL: |
http://www.spyprotectorpro.com/
|
| Threat Level: |
Elevated Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
Spy Protector provides you the software SpyProtector that is the âall in oneâ solution which cares about your PC. It is an ultra efficient protection software with the minimal resources expenditure. It will protect you from viruses,
worms, spyware, and all Internet threats at the same time saving resources and improving your computer s speed.
Spyware Description:
SpyProtector is a rogue security program that shows false Warning messages.It also shows misleading scan Results.
Characteristics/Symptoms:
-> It shows false Warning messages. -> It also shows misleading scan Results.
Additional information might be found here:
Processes Running:
lsascs.exe
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Spy Protector\Purchase License.url |
60 |
Internet Shortcut |
| C:\Documents and Settings\[USER]\Start Menu\Programs\Spy Protector\Spy Protector.lnk |
783 |
Shortcut |
| C:\WINDOWS\system32\ire853.dll |
51216 |
Application Extension |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Spy Protector |
Order |
| HKEY_CURRENT_USER |
\Software\Microsoft\Windows\CurrentVersion\SpyProtector |
SpyProtector |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83} |
|
