Should I block it?
90% of PCs block this file from running.
Possible reason:
Multiple malware detections
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
 PE file structure
|
Show functions |
sprotector.dll
SProtector 1.66.1133
| Version: | 1.66.1133 |
| MD5: | 605ddc5f152cd5dc0c4276d70a62a7d0 |
| SHA1: | 8a09a270d06e023110dfcb19538293f3ec750881 |
| SHA256: | 083bfd7dc73821b9b1d3e0f27f0596b7d9a02f532e5e168b3a3efaec72d46006 |
Warning 4 antivirus scanners has detected malware.
What is sprotector.dll?
SProtector has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast classifies it as a potentially unwanted program (PUP) Win32:SProtector-B [PUP] and DrWeb flags it as Adware.BGuard. The program, specifically the sprotector.dll file is loaded into Google Chrome and connects to the Internet.
Overview
sprotector.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including WxDownload 1.66 published by Search Assistant SProtector, SProtector 1.66 from Search Assistant SProtector and SProtector 1.66 by Search Assistant SProtector.
Details
| File name: | sprotector.dll |
| Product name: | SProtector 1.66.1133 |
| Typical file path: | C:\Program Files\AppsAreFun\sprotector.dll |
| File version: | 1.66.1133 |
| Size: | 347 KB (355,328 bytes) |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | Yes |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
SaveAs is an adware program that is typically bundled with 3rd party software or installed via a browser exploit. It installs a Browser Helper Object (BHO) in Internet Explorer in order to inject advertising as well as hijack links and existing web page ads.
|
Search Assistant SProtector |
|
wxDownload Fast (also known as wxDFast) is a free/open source download manager. It was created to be multi-platform. It is a multi-threaded (aka accelerated or segmented) download manager. This means that it can split a file into several pieces and download the pieces simultaneously. Created in C++ using the wxWidgets library, wxDownload Fast can be built with MinGW or MSVC, allowing it to be built with just free/open source tools.
|
Search Assistant SProtector |
|
SProtector has been seen being bundled with various know adware programs including ContinueToSave, Search Assistant, JustBrowse, BrowseToSave, EasyLife Search and AppsAreFun. It has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast classifies it as a potentially unwanted p...
|
Search Assistant SProtector |
|
BrowseToSave is an adware program installed into Internet Explorer, Firefox and Chrome. The programs collects and stores information about web browsing habits and sends this information to its remote servers in order to provide injected advertising in search results and various other places. Search Assistant will also modify the browser's home page and search provider. It displays various pop-up advertisements and tracks and reports you...
|
WebPick Internet Holdings Ltd. |
|
GadgetBox Toolbar (also an Sprotector variant) is an ad-supported (users may see additional banner and in-text link advertisements) Windows Gadget plugin.
Malware detections
Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| CAT Quick Heal |
4.13.12.00 |
Worm.SProtector.A3 |
| ESET NOD32 |
7.8136 |
a variant of Win32/SProtector.A |
| Trend Micro |
9.740.0.1012 |
TROJ_SPNR.0BC513 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_SPNR.0BC513 |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
35.71% |
|
| Windows 7 Home Premium |
28.57% |
|
| Windows Vista Ultimate |
14.29% |
|
| Windows Vista Home Basic |
7.14% |
|
| Windows 7 Professional |
7.14% |
|
| Windows 7 Ultimate |
7.14% |
|
Distribution by country
Indonesia installs about 21.43% of SProtector 1.66.1133.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Toshiba |
50.00% |
|
