Remove Spyware Protect 2009 (removal instructions)

Posted by on Tuesday, March 3rd, 2009  |  4,335 views

Spyware Protect 2009 is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as Zlob and false video codecs), but it can also be installed manually by the victim.

Once your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.

Make sure to not fall in this scam, if your computer is infected with Spyware Protect 2009, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

  • The process tp_starter.exe is running in your system
  • The process SpywareProtect2009.exe is running in your system
  • The process sysguard.exe is running in your system
  • Slow computer performance
  • Repeated security warnings, alerts and system scans
  • Web sites that suddenly are shown on your desktop

Malicious web sites and urls:

1
2
3
4
5
6
7
8
9

browser-security.microsoft.com
spy-wareprotector2009.com
spy-wareprotector2009.com
secure.spy-wareprotector2009.com
swp2009.com
spwrpr2009.com
sysguard2009.com
alsterstore.com
adwareguard.net

When the program is executed, it creates the following files:

1
2
3
4
5
6
7
8
9
10
11
12
13
14

%ProgramFiles%Spyware Protect 2009
%ProgramFiles%Spyware Protect 2009\gfx.bin
%ProgramFiles%Spyware Protect 2009\options.ini
%ProgramFiles%Spyware Protect 2009\SpywareProtect2009.exe
%ProgramFiles%Spyware Protect 2009\SpywareProtect2009.exe.MANIFEST
%ProgramFiles%Spyware Protect 2009\SpywareProtect2009_start_setup.exe
%ProgramFiles%Spyware Protect 2009\tp_starter.exe
%ProgramFiles%Spyware Protect 2009\uninstall.exe
%ProgramFiles%Spyware Protect 2009\uninstall.log
%ProgramFiles%Spyware Protect 2009\vbase.ini
%ProgramFiles%Spyware Protect 2009\lang
%ProgramFiles%Spyware Protect 2009\lang\english.lng
C:\WINDOWS\sysguard.exe
C:\WINDOWS\system32\iehelper.dll

The program creates the following registry entries:

1
2
3
4

HKCU\Software\Spyware Protect 2009
HKCU\Software\Microsoft\Windows\CurrentVersion\uninstall\Spyware Protect 2009
HKCU\Software\Microsoft\Windows\CurrentVersion\Run Spyware Protect 2009
HKCU\SOFTWARE\AvScan

How to remove Spyware Protect 2009 (manual removal) ?

  • Kill the running process tp_starter.exe
  • Kill the running process SpywareProtect2009.exe
  • Kill the running process sysguard.exe
  • Unregister all the Spyware Protect 2009 DLLs
  • Delete all the Spyware Protect 2009 files
  • Delete all the Spyware Protect 2009 registry entries

How to remove Spyware Protect 2009 (automatic removal) ?

Posted by on Tuesday, March 3rd, 2009 at 12:08 pm and filed under Rogue Software with tags , , . You can skip to the end and leave a response. Pinging is currently not allowed.

Random Posts

Previous Posts