Versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
sprotector.dll
SProtector 1.66.1133
Warning 11 antivirus scanners has detected malware in various versions of sprotector.dll.
Overview
There are 4 versions of sprotector.dll in the wild, the latest version being 1.66.1133. The average file size is about 468.23 KB. The programs WxDownload 1.66, SProtector 1.66 and Search Assistant MocaFlix 1.66 have been observed as installing specific variations of sprotector.dll.
What is sprotector.dll?
SProtector has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast classifies it as a potentially unwanted program (PUP) Win32:SProtector-B [PUP] and DrWeb flags it as Adware.BGuard. The program, specifically the sprotector.dll file is loaded into Google Chrome and connects to the Internet.
 Details
|
| File name: | sprotector.dll |
| Product name: | SProtector 1.66.1133 |
| Typical file path: | C:\Program Files\AppsAreFun\sprotector.dll |
Programs installed in
(Note, the programs listed below are for all versions of SProtector 1.66.1133.)
SaveAs is an adware program that is typically bundled with 3rd party software or installed via a browser exploit. It installs a Browser Helper Object (BHO) in Internet Explorer in order to inject adve...
|
Search Assistant SProtector |
|
wxDownload Fast (also known as wxDFast) is a free/open source download manager. It was created to be multi-platform. It is a multi-threaded (aka accelerated or segmented) download manager. This means ...
|
Search Assistant SProtector |
|
SProtector has been seen being bundled with various know adware programs including ContinueToSave, Search Assistant, JustBrowse, BrowseToSave, EasyLife Search and AppsAreFun. It has been detected as '...
|
Search Assistant SProtector |
|
BrowseToSave is an adware program installed into Internet Explorer, Firefox and Chrome. The programs collects and stores information about web browsing habits and sends this information to its remote ...
|
Search Assistant SProtector |
|
Search Assistant AppsAreFun is an adware program installed into Internet Explorer, Firefox and Chrome. The programs collects and stores information about web browsing habits and sends this information...
|
Search Assistant SProtector |
|
Search Assistant MocaFlix is a web browser extension that is designed to deliver ads. It is considered adware and modifies the user's web browser settings including the default home page and search se...
|
WebPick Internet Holdings Ltd. |
|
GadgetBox Toolbar (also an Sprotector variant) is an ad-supported (users may see additional banner and in-text link advertisements) Windows Gadget plugin.
Malware detections
Based on 40+ industry antivirus scanners, 11 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| avast! |
6.0.1289.0 |
Win32:SProtector-A [PUP] |
1.66.1133 |
| CAT Quick Heal |
4.13.12.00 |
Worm.SProtector.Gen |
1.66.1133 |
| CAT Quick Heal |
4.13.12.00 |
Worm.SProtector.A3 |
1.66.1133 |
| Dr.Web |
8.13.4.10 |
Adware.BGuard.3 |
1.66.1133 |
| Emsisoft Anti-Malware |
3.0.0.569 |
Trojan.Win32.SProtector.AMN (A) |
1.66.1133 |
| ESET NOD32 |
7.8082 |
Win32/SProtector |
1.66.1133 |
| ESET NOD32 |
7.8136 |
a variant of Win32/SProtector.A |
1.66.1133 |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.Agent.k.(kcloud) |
1.66.1133 |
| Trend Micro |
9.740.0.1012 |
TROJ_SPNR.0BC513 |
1.66.1133 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1L2 |
1.66.1133 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_SPNR.0BC513 |
1.66.1133 |
All file variations of sprotector.dll
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
35.71% |
|
| Windows 7 Home Premium |
28.57% |
|
| Windows Vista Ultimate |
14.29% |
|
| Windows Vista Home Basic |
7.14% |
|
| Windows 7 Professional |
7.14% |
|
| Windows 7 Ultimate |
7.14% |
|
Distribution by country
Indonesia installs about 21.43% of SProtector 1.66.1133.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
50.00% |
|
| Toshiba |
50.00% |
|
