print version

Spyware Protect

Spyware Protect

Slow computer performance can be a symptom of a number of issues, but when it is coupled with pop-ups, it is a very good indicator of a rogue antivirus program.  What are these programs?  What should you do if you have one, such as Spyware Protect, in your system?

The Spyware Protect Antivirus Program

Rogue antivirus programs have one goal: to persuade computer owners to purchase their software.  Owners need to be aware that these rogue programs offer great protection but deliver very little in the way of security.  Spyware Protect starts running when you boot up your computer and goes through a simulated scan process.  It displays a list of malware files it has found.  But, because this is an ad and not a real scan program, the results are all false.  Spyware Protect is not able to scan your computer, and it creates malware files to enhance the effects of its warnings.  These are not real threats.  Buying the full version of Spyware Protect will not remove any issues in your computer, if there are any.  It especially will not remove the pop-ups and ads for Spyware Protect, leaving owners with the same problems and a bit less money.

Spyware Protect is also known as Spyware Protect 2009. 

Is Spyware Protect in My System?

 Antivirus programs usually remain dormant for a period of time after it enters your system.  During this time, it works on modifying your settings and evading legitimate antivirus programs without your knowledge.  When it becomes active, however, you will notice a sudden influx of warning messages and pop-ups.  These range from warnings about remote attacks to malware infections.  In addition to seeing false can results, you will also notice new icons in the taskbar.  When these are clicked on, you will get the following message:

Windows Security alert

Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

On the false scan result window, you will see a list of supposed malware files.  Next to each is a description.  For instance, you may see the "critical threat" LdPinch V, which is described as a key logger or the "high level threat" of Advanced Stealth Email, which is able to hijack your inbox and email settings.  Both of these are created by Spyware Protect and do not pose a threat to your system.   Any ads which use the threat of endangering personal or financial information are particularly effective because this is a very real concern of computer users. 

In addition to pop-ups and warnings, you will also notice that your homepage has been hijacked.  Spyware Protect replaces it with one of its own websites.  Here, you are confronted with more malware threats and urged to purchase the software. 

Another very common sign of Spyware Protect and other rogue antivirus programs is slow computer functioning. Spyware Protect takes up residence in your system and diverts needed resources from your programs.  Using up to eighty percent or more of your resources means your legitimate files have very little with which to run.  This has another purpose as well:  slow performance appears to back up Spyware Protect's claims that something is amiss in your system.  Again, though, Spyware Protect causes this and is not the solution. 

How Did Spyware Protect Enter My System?

Besides convincing computer owners to purchase the software and install it themselves, Spyware Protect usually enters systems through trojans. These are carriers of malware that may be picked up though spam emails, infected videos, file sharing sites, or sites with adult, gaming, or pirated content.  In April of 2009, the Conflicker worm became the method of entry for Spyware Protect.  The Conflicker worm is able to install malware from rogue websites into your system.  The variety of malware ranges from password-stealers to rogue antivirus programs like Spyware Protect.

How does the Conflicker worm get into your system?  It may exploit a weakness in Microsoft's server or those computers without the updated security patch.  It can also infect your computer if infected removable devices are plugged into your USB port.  For instance, an MP3 player may be plugged into an infected computer.  Taken out, it may then infect the next computer it is put into because Conflicker has installed an autorun file that starts as soon as it is plugged in.

Your home computer is usually protected by a security program or firewall.  Laptops are a bit more vulnerable because they can pick up the worm if used on a different network.  For instance, if you bring your notebook to work and use their network, and then bring it home, it is possible that Conflicker can enter. It can bring Spyware Protect in with it.

For these reasons, it is essential that you remove the program as soon as you notice the signs that it is in your computer.

How Do I Remove Spyware Protect?

Automatic and manual removal are your two options when it comes to removing Spyware Protect from your computer completely.  Automatic removal with a reputable software program like ParetoLogic's XoftSpySE is by far the easies route.  All you need to do is install the software - you can be assured that the product named is legitimate and will not harm your computer.  Furthermore, it removes every trace of Spyware Protect so you can resume your normal activities and maintain your system's performance.  This is ideal for those who do not have the time, patience, or experience to manually remove rogue antivirus programs.

Manual removal is much more difficult and should be attempted only by those with experience and a good deal of perseverance.  You should use caution because the files and registry values look almost identical to those of legitimate files.  This makes it very easy to overlook a few or to even delete necessary files.  If you know your way through the inner workings of a computer, complete the following directions to remove Spyware Protect:

Block Sites:

www.adwareguard.net
www.antivirus-win.com
www.antivguardian.com
www.antiwareprotect.com
www.browser-security.microsoft.com
www.os-protection.com
www.sp-protect2009.com
www.spwprotect2009.com
www.spy-protec.com
www.spy-protect-2009.com
www.spyprotect2009.com
www.spyware-protector-2009.com
www.spywprotect.com
www.spywrprotect-2009.com
www.swp2009.com
www.sys-protection.com
www.sysguard2009.com
www.sysprotect.net 

Stop Processes:

SpywareProtect2009.exe
SysGuard.exe
c:WINDOWSaazalirt.exe
c:WINDOWSdkekkrkska.exe
c:WINDOWSdkewiizkjdks.exe
c:WINDOWSiddqdops.exe
c:WINDOWSienotas.exe
c:WINDOWSiqmcnoeqz.exe
c:WINDOWSirprokwks.exe
c:WINDOWSjikglond.exe
c:WINDOWSjiklagka.exe
c:WINDOWSjrjakdsd.exe
c:WINDOWSjungertab.exe
c:WINDOWSkitiiwhaas.exe
c:WINDOWSkkwknrbsggeg.exe
c:WINDOWSklopnidret.exe
c:WINDOWSkrkdkdkee.exe
c:WINDOWSkrkmahejdk.exe
c:WINDOWSkrtawefg.exe
c:WINDOWSkrujmmwlrra.exe
c:WINDOWSktknamwerr.exe
c:WINDOWSkuruhccdsdd.exe
c:WINDOWSooorjaas.exe
c:WINDOWSoranerkka.exe
c:WINDOWSoropbbsee.exe
c:WINDOWSronitfst.exe
c:WINDOWSseeukluba.exe
c:WINDOWSskaaanret.exe
c:WINDOWSsysguardn.exe
c:WINDOWStobmygers.exe
c:WINDOWStobykke.exe
c:WINDOWSzibaglertz.exe
c:WINDOWSotnnbektre.exe
c:WINDOWSotowjdseww.exe
c:WINDOWSotpeppggq.exe
c:WINDOWSrkaskssd.exe
c:Program FilesSpyware Protect 2009SpywareProtect2009_start_setup.exe
c:Program FilesSpyware Protect 2009SpywareProtect2009.exe
c:Program FilesSpyware Protect 2009tp_starter.exe
c:Program FilesSpyware Protect 2009uninstall.exe

Delete Files:

Spyware Protect 2009.lnk
Uninstall Spyware Protect 2009.lnk
c:Program FilesSpyware Protect 2009
c:Program FilesSpyware Protect 2009gfx.bin
c:Program FilesSpyware Protect 2009options.ini
c:Program FilesSpyware Protect 2009SpywareProtect2009.exe.MANIFEST
c:Program FilesSpyware Protect 2009uninstall.log
c:Program FilesSpyware Protect 2009vbase.ini
c:Program FilesSpyware Protect 2009lang
c:Program FilesSpyware Protect 2009langenglish.lng
c:WINDOWSsystem32vbzlib2.dll

Remove Registry Keys:

HKEY_CURRENT_USERSoftwareSpyware Protect 2009
HKEY_CURRENT_USERSoftwareAvScan
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun Spyware Protect 2009
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionuninstallSpyware Protect 2009
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "sysguardn"

 to top