print version

Spyware Protect 2009

Spyware Protect 2009

Rogue antivirus programs may have different names and slightly different methods, but the main goal of each remains the same: to convince computer users that they have security risks in their systems.  Why?  So then users will then turn to these programs for help in removing the threats.  Unfortunately programs like Spyware Protect 2009 promise outstanding protection and security but deliver little more than pop-ups, rogue websites, and substandard computer performance.

What is Spyware Protect 2009?

Spyware Protect shares the objective of all rogue antivirus programs that was mentioned earlier.  It does this by launching a simulated scan each time your computer starts.  It will then produce the results with a long list of malware files it has found. Two things to be aware of:  this is an ad or a display put on in order to convince users that there is a threat to their system security.  As an ad, it cannot scan your computer.  The infections it claims to have found are fake files created by Spyware Protect 2009 in order to further its goals.  One more thing that it is important to remember: this program is the cause of these pop-ups and warnings.  There is likely no other security issues in your system.  As the cause, there is no way for Spyware Protect 2009 to be the solution.  Avoid purchasing this program as it does not provide protection. 

How Does Spyware Protect 2009 Become Installed?

One of the most common ways that Spyware Protect 2009 becomes installed is that computer users have purchased the rogue program and downloaded it onto their computer.  If this is the case, then be assured that you are not alone.  The constant barrage of pop-ups is very convincing.  If you haven't purchased Spyware Protect 2009, though, you may wonder how it came to be on your computer.  The answer?  Trojans.

Trojans are found in a variety of places:  affected websites (including those with adult, gaming, and pirated content), file sharing applications, freeware and share, programs with exploitable security gaps, such is certain IM programs or social networking applications, and spam emails. Downloading affected media or clicking on ads and banners are vulnerable or even simply visiting the sites can attract trojans into your system.  Like the Greeks who entered Troy in the big wooden horse, trojans allow malware into your system.  This is the traditional route of rogue antivirus programs.

In early 2009, the Conflicker worm began carrying and advertising Spyware Protect 2009.  Now it is the primary method that Spyware Protect uses to gain access to your computer.  A word about Conflicker:  this is a worm that carries various forms of malware into computer systems.   Most home computers are safe from this particular worm if they have recent antivirus programs installed, which are updated regularly.  However, some exceptions seem to apply.  It is possible for laptops to be vulnerable if they are used in different networks.  For instance, if you bring a laptop to the library and work on their network, and then bring it home and work, you may have brought Conflicker home too.

Another mode of entry is through removable devices. For instance, if a mp3 player is plugged into an infected machine's USB port, taken out, and put into another machine, then it may cause Conflicker to infect the second computer.  Again, though, most computers are protected against this.  If, however, Spyware Protect 2009 has managed to come in, you should take immediate steps to remove it.

What Will Happen if Spyware Protect 2009 is Installed?

The biggest red flag that you have a rogue antivirus program in your system is the presence of pop-ups.  Filter usually block most, if not all, of these, so a sudden resurgence of these annoying little ads tells us that something is amiss.  You will be able to determine the program that is responsible for the pop-ups if you take a moment to examine them carefully without clicking on anything.  "Spyware Protect 2009" is boldly written at the top of the warnings scans and messages.  There is a blue shield symbol with a white stripe through it, accompanied by the slogan, "Protecting every second." 

The false scans look very much like those of legitimate programs.  A typical one from Spyware Protect 2009 will indicate that it has searched thousands of files and has found a host of threats, as many as thirty or forty.  A few examples:  VMalum AWS/ Severity: High/ Description: Trojan or Bancos DMD/ Severity: Critical/ Description: a variant of the keylogger that captures passwords.

These appear to be very serious infections, and Spyware Protect 2009 advises that you:

Activate Spyware Protect 2009 now to be sure that maximal protection is applied.

It is routine for Spyware Protect to add shortcuts and taskbar icons to your system.  If clicked on these rely the following messages or divert you to one of Spyware Protect 2009's websites:

Windows Security alert

Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

In addition to these false threats, Spyware Protect 2009 also modifies your browser settings.  Your homepage may be replaced with a Spyware Protect 2009 web site, which urges you to purchase its full software.  It is also common for this program to redirect you to its own websites when you try to conduct searches or go to a website.  Again, all this does is try to convince you of security problems so you will purchase the program. 

You will also find that your computer is performing much slower than usual.  Spyware Protect 2009 buries itself in your system and appropriates much of your resources to itself.  It is not unusual for programs such as this to use eighty percent or even more of your CPU capacity.  This leaves your legitimate programs with far less than standard power, meaning that they run much more slowly.  Loading web pages takes longer, as does opening programs or even starting your computer.  Spyware Protector 2009 also causes your internet connection to slow.

Removing Spyware Protect 2009

Spyware Protect 2009 is designed to evade basic removal efforts.  This is why running your antivirus program or using the delete option are unlikely to totally remove it.  They may eliminate surfaces traces, but as Spyware Protect 2009 is buried deep in your system registry, a more intensive approach is called for.  This leaves two viable options:

Automatic removal.  There are many benefits to this method.  It is ideal for those with limited technical experience, it is fast, it is effective, and it will save you money in the long-run because you resolve any security issues early and completely.  Choosing a reliable program is a must.  ParetoLogic's XoftSpySE is one such program that is designed specifically for rogue antivirus programs and others that are resistant to removal.  It will search out and eradicate Spyware Protect 2009. 

Manual removal.  This should only be used by people with technical expertise - who also have a lot of patience and a meticulous nature.  Removing files that all look the same can be tedious and there is much room for error.  It is easy to overlook files that need to be deleted or delete those that need to stay.  For this reason, only remove Spyware Protect 2009 if you know your way around a system registry and have a lot of time to devote to the project.  If so, complete the following:

Block Sites:

www.adwareguard.net
www.antivirus-win.com
www.antivguardian.com
www.antiwareprotect.com
www.browser-security.microsoft.com
www.os-protection.com
www.sp-protect2009.com
www.spwprotect2009.com
www.spy-protec.com
www.spy-protect-2009.com
www.spyprotect2009.com
www.spyware-protector-2009.com
www.spywprotect.com
www.spywrprotect-2009.com
www.swp2009.com
www.sys-protection.com
www.sysguard2009.com
www.sysprotect.net 

Stop Processes:

SpywareProtect2009.exe
SysGuard.exe
c:WINDOWSaazalirt.exe
c:WINDOWSdkekkrkska.exe
c:WINDOWSdkewiizkjdks.exe
c:WINDOWSiddqdops.exe
c:WINDOWSienotas.exe
c:WINDOWSiqmcnoeqz.exe
c:WINDOWSirprokwks.exe
c:WINDOWSjikglond.exe
c:WINDOWSjiklagka.exe
c:WINDOWSjrjakdsd.exe
c:WINDOWSjungertab.exe
c:WINDOWSkitiiwhaas.exe
c:WINDOWSkkwknrbsggeg.exe
c:WINDOWSklopnidret.exe
c:WINDOWSkrkdkdkee.exe
c:WINDOWSkrkmahejdk.exe
c:WINDOWSkrtawefg.exe
c:WINDOWSkrujmmwlrra.exe
c:WINDOWSktknamwerr.exe
c:WINDOWSkuruhccdsdd.exe
c:WINDOWSooorjaas.exe
c:WINDOWSoranerkka.exe
c:WINDOWSoropbbsee.exe
c:WINDOWSronitfst.exe
c:WINDOWSseeukluba.exe
c:WINDOWSskaaanret.exe
c:WINDOWSsysguardn.exe
c:WINDOWStobmygers.exe
c:WINDOWStobykke.exe
c:WINDOWSzibaglertz.exe
c:WINDOWSotnnbektre.exe
c:WINDOWSotowjdseww.exe
c:WINDOWSotpeppggq.exe
c:WINDOWSrkaskssd.exe
c:Program FilesSpyware Protect 2009SpywareProtect2009_start_setup.exe
c:Program FilesSpyware Protect 2009SpywareProtect2009.exe
c:Program FilesSpyware Protect 2009tp_starter.exe
c:Program FilesSpyware Protect 2009uninstall.exe

Delete Files:

Spyware Protect 2009.lnk
Uninstall Spyware Protect 2009.lnk
c:Program FilesSpyware Protect 2009
c:Program FilesSpyware Protect 2009gfx.bin
c:Program FilesSpyware Protect 2009options.ini
c:Program FilesSpyware Protect 2009SpywareProtect2009.exe.MANIFEST
c:Program FilesSpyware Protect 2009uninstall.log
c:Program FilesSpyware Protect 2009vbase.ini
c:Program FilesSpyware Protect 2009lang
c:Program FilesSpyware Protect 2009langenglish.lng
c:WINDOWSsystem32vbzlib2.dll

Remove Registry Keys:

HKEY_CURRENT_USERSoftwareSpyware Protect 2009
HKEY_CURRENT_USERSoftwareAvScan
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun Spyware Protect 2009
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionuninstallSpyware Protect 2009
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "sysguardn"

 to top