Versions

2.1.1000.13491	1.30%
2.1.1000.12150	3.90%
2.1.1000.10905	20.78%
2.1.1000.10844	1.30%
2.1.1000.10568	14.29%
2.1.1000.10493	22.08%
2.1.1000.10443	6.49%
2.1.1000.10348	2.60%
2.1.1000.10229	3.90%
2.1.1000.10225	23.38%

Warning 11 antivirus scanners has detected malware in various versions of AdvancedSystemProtector.exe.

advancedsystemprotector.exe has 10 known versions, the most recent one is 2.1.1000.13491. advancedsystemprotector.exe is run as a standard windows process with the logged in user's account privileges. It also provides a graphical interface (GUI) for the user to interact with it and contains an icon in the Windows notifictaion system tray (near the clock). During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. In order execute the program with adminsitrator rights and prevent a UAC prompt, the program will add a job to the Windows Task Scheduler that will automtaiclaly start it when a user logs on. The average file size is about 6.17 MB. It is an authenticode code-signed executable issued to Systweak Software by the certification authority VeriSign. Some variations of the file have been seen to be installed with the program Advanced System Protector from Systweak Inc. This is a .NET Common Language Runtime (CLR) assembly. During the process's lifecycle, the typical CPU resource utilization is about 0.0011% including both foreground and background operations, the average private memory consumption is about 69.63 MB with the maximum memory reaching around 110.05 MB. Addionally, typically read and write I/O disk operations is about 135.05 KB per minute for reads and 85.15 KB per minute for writes.

Based on 40+ industry antivirus scanners, 11 of them detected the following malware.