Should I block it?
Yes, 98% block recommendation.
Possible reason:
Multiple malware detections
Additional versions
(Note, the developer publishes each variation of this file with the same version, but the hashes are unique.)
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegCloseKey, RegEnumKeyExW, CheckTokenMembership, RegOpenKeyExW, FreeSid, RegEnumValueW, AllocateAndInitializeSid, RegDeleteValueW, RegDeleteKeyW, RegQueryValueExW, RegCreateKeyExW, ConvertSidToStringSidW, IsValidSid, GetTokenInformation, OpenProcessToken, RegSetValueExW
kernel32.dll
DllMain
Export table
sprotector.dll
| MD5: | 0603547a50f0f44af39c712e3206dfba |
| SHA1: | 047969e4208aabb8d9ec04243915a2b2c0c469f5 |
| SHA256: | bdd1439b3c3a58cfb2674f59c0ca012964c69405f1fd442f589eb1a9f02761b6 |
Warning 20 antivirus scanners has detected malware.
What is sprotector.dll?
SProtector has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast classifies it as a potentially unwanted program (PUP) Win32:SProtector-B [PUP] and DrWeb flags it as Adware.BGuard. The program, specifically the sprotector.dll file is loaded into Google Chrome and connects to the Internet.
Overview
sprotector.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Search Assistant SimpleSpeedy 1.74 published by Search Assistant SProtector and Search Assistant 1.74 published by Search Assistant SProtector.
Details
| File name: | sprotector.dll |
| Typical file path: | C:\Program Files\ContinueToSave\sprotector.dll |
| Size: | 1008.5 KB (1,032,704 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
|
Search Assistant SProtector |
|
Search Assistant SimpleSpeedy is an adware program installed into Internet Explorer, Firefox and Chrome. The programs collects and stores information about web browsing habits and sends this information to its remote servers in order to provide injected advertising in search results and various other places. Search Assistant will also modify the browser's home page and search provider. It displays various pop-up advertisements and track...
|
Search Assistant SProtector |
|
This is a web browser plugin that is potentially unwanted and ad-supported. In addition to displaying advertisements, as part of the installation process the publisher may offer changes to the web browser settings. Such changes may include the following:
- Modifying/changing the default home page URL
- Changing the search provider (built-in search box) and search pages
- Changing the new tab page
- Updating some browser settings whi...
Malware detections
Based on 40+ industry antivirus scanners, 20 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Ad-Aware |
12.0.163.0 |
Adware.Generic.377349 |
| avast! |
8.0.1489.320 |
Win32:SProtector-A [PUP] |
| AVG |
13.0.0.3169 |
Generic5.ZKL |
| BitDefender |
7.2.5028.0 |
Adware.Generic.377349 |
| Clam AntiVirus |
0.97.3.0 |
Win.Adware.377349 |
| Comodo Internet Security |
17388 |
ApplicUnwnt |
| Dr.Web |
8.13.8.11 |
Adware.BGuard.11 |
| Emsisoft Anti-Malware |
3.0.0.589 |
Adware.Generic.377349 (B) |
| ESET NOD32 |
7.9133 |
a variant of Win32/SProtector.A |
| Fortinet |
5.1.147.0 |
Adware/Fam.NB |
| F-Secure |
11.0.19100.45 |
Adware.Generic.377349 |
| G Data |
13.8.22 |
Adware.Generic.377349 |
| Ikarus |
T3.1.5.6.0 |
AdWare.SuspectCRC |
| K7 AntiVirus |
9.174.10410 |
Trojan ( 0048d3ad1 ) |
| K7GW |
9.174.10410 |
Trojan ( 0048d3ad1 ) |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.Generic.a.(kcloud) |
| McAfee |
5.600.1067 |
Artemis!0603547A50F0 |
| McAfee Gateway Anti-Malware |
v2013-dat |
Artemis!0603547A50F0 |
| eScan by MicroWorld |
12.0.250.0 |
Adware.Generic.377349 |
| VIPRE Antivirus |
24026 |
Trojan.Win32.Generic!BT |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
30.95% |
|
| Microsoft Windows XP |
28.57% |
|
| Windows 7 Home Premium |
26.19% |
|
| Windows 7 Professional |
4.76% |
|
| Windows Vista Home Premium |
4.76% |
|
| Windows 7 Home Basic |
4.76% |
|
Distribution by country
United States installs about 11.90% of sprotector.dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
23.53% |
|
| Dell |
15.69% |
|
| Hewlett-Packard |
13.73% |
|
| GIGABYTE |
13.73% |
|
| Acer |
7.84% |
|
| Sony |
7.84% |
|
| American Megatrends |
5.88% |
|
| Intel |
3.92% |
|
| Lenovo |
3.92% |
|
| Toshiba |
3.92% |
|
