SysProtect

SysProtect is a disabled data repair utility that nags the user to purchase it in order to fix the problems reported in its scan. SysProtect is typically installed though security exploits and bundled with spyware/malware, although it may be downloaded from the vendor's website. The program will scan the computer and report errors as repairable but does not provide any details to what is at risk. It then recommends repair that requires a purchase to unlock the program. It also sets a registry key to automatically launch the program on startup. SysProtect appears to be a clone of winfixer and error safe.0

General information:

Malware Name:	SysProtect
Malware Type:	Rogue Security Program
Company Name:	SysProtect
Company URL:	http://www.sysprotect.com/
Threat Level:	Elevated Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation.

Company Description:

SysProtect cleans hard drive liberating wasted space, fixes drive errors, Windows Registry problems, corrupted Microsoft Word documents, invalid Multimedia music and video files, damaged Excel sheets and many other file types. SysProtect is the best tool to repair PC in the easiest way now and forever. It secures computer stability, configuration and execution by periodical scanning corrupted system files. It liberates wasted space on hard drive releasing RAM memory and boosts system performance by eliminating unnecessary device drivers. By scanning drives periodically data and files are safe from future system corruptions

Spyware Description:

SysProtect is a disabled data repair utility that nags the user to purchase it in order to fix the problems reported in its scan. SysProtect is typically installed though security exploits and bundled with spyware/malware, although it may be downloaded from the vendor's website. The program will scan the computer and report errors as repairable but does not provide any details to what is at risk. It then recommends repair that requires a purchase to unlock the program. It also sets a registry key to automatically launch the program on startup. SysProtect appears to be a clone of winfixer and error safe.0

Characteristics/Symptoms:

    -> False positives work as good to purchase -> False scan results -> Uses inadequate scan/detection scheme -> Uses out of date ref database0

Additional information might be found here:

	Search at Google for SysProtect
	Search at Bing for SysProtect
	Search at Yahoo for SysProtect

Processes Running:

USYP.exe

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Program Files\SysProtect Free\USYP.exe	1273856	Application
C:\Program Files\SysProtect Free\Updater.exe	655360	Application
C:\Program Files\SysProtect Free\updater.dat	249	DAT File

Folder information Created after Installation:

Folder Location
C:\Program Files\SysProtect Free
C:\Program Files\SysProtect Free\Backup

Registry information Created after Installation: