SpyProtector Virus

SpyProtector is a fake security program meant to trick users.

SpyProtector is a fake anti-spyware program that uses deceptive advertising techniques to trick users and infect their computers. SpyProtector, designed to mimic a legitimate anti-spyware program, claims to disinfect computers from common threats, but in reality, is a spyware itself.

Infection

SpyProtector is hosted by several questionable websites. When a user opens one of these webpages, a fake scanner embedded in the page states that the computer is infected, and that the user should download and install SpyProtector to eliminate the threats. The objective is to scare users into installing the fake program into their systems.

Fake Alerts

When SpyProtector infects a system, it configures itself to load automatically on startup. The program then runs fake scans and generates a list of "infected items," which are actually valid system files. The program consistently displays annoying popup alerts from the System Tray, showing the legitimate files as being infected. The alert messages cannot be disabled unless SpyProtector is removed.

Ransomware

SpyProtector is a new breed of malicious programs sometimes referred to as "ransomware." It was designed to trick and con unsuspecting users into paying money for a nonexistent program. SpyProtector does not allow users to manually delete the files it claims to be infected, in an effort to force users to buy a license or subscription.

References

• Bleeping Computer: How to Remove SpyProtector
• 2 Spyware: Remove Spy Protector