Home Malware Programs Fake Warning Messages Spyware Protect 2009 Windows Security Alert

Spyware Protect 2009 Windows Security Alert

Posted: May 26, 2009

"Spyware Protect 2009 Windows Security Alert" or simply "Windows Security Alert", is a fake system alert created by scareware Spyware Protect 2009. This "Windows Security Alert" reads:

"Windows Security alert. Windows reports that this computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here to scan your computer. Your system might be at risk now."

If you follow this "Windows Security Alert's" prompts, you will end up wasting money on fake anti-spyware software Spyware Protect 2009.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\WINDOWS\aazalirt.exe
    2 c:\WINDOWS\dkekkrkska.exe
    3 c:\WINDOWS\dkewiizkjdks.exe
    4 c:\WINDOWS\iddqdops.exe
    5 c:\WINDOWS\ienotas.exe
    6 c:\WINDOWS\iqmcnoeqz.exe
    7 c:\WINDOWS\irprokwks.exe
    8 c:\WINDOWS\jikglond.exe
    9 c:\WINDOWS\jiklagka.exe
    10 c:\WINDOWS\jrjakdsd.exe
    11 c:\WINDOWS\jungertab.exe
    12 c:\WINDOWS\kitiiwhaas.exe
    13 c:\WINDOWS\kkwknrbsggeg.exe
    14 c:\WINDOWS\klopnidret.exe
    15 c:\WINDOWS\krkdkdkee.exe
    16 c:\WINDOWS\krkmahejdk.exe
    17 c:\WINDOWS\krtawefg.exe
    18 c:\WINDOWS\krujmmwlrra.exe
    19 c:\WINDOWS\ktknamwerr.exe
    20 c:\WINDOWS\kuruhccdsdd.exe
    21 c:\WINDOWS\ooorjaas.exe
    22 c:\WINDOWS\oranerkka.exe
    23 c:\WINDOWS\oropbbsee.exe
    24 c:\WINDOWS\otnnbektre.exe
    25 c:\WINDOWS\otowjdseww.exe
    26 c:\WINDOWS\otpeppggq.exe
    27 c:\WINDOWS\rkaskssd.exe
    28 c:\WINDOWS\ronitfst.exe
    29 c:\WINDOWS\seeukluba.exe
    30 c:\WINDOWS\skaaanret.exe
    31 c:\WINDOWS\sysguardn.exe
    32 c:\WINDOWS\tobmygers.exe
    33 c:\WINDOWS\tobykke.exe
    34 c:\WINDOWS\zibaglertz.exe
    35 Spyware Protect 2009.lnk
    36 SpywareProtect2009.exe
    37 SysGuard.exe
    38 Uninstall Spyware Protect 2009.lnk
    39 vbzlib2.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\AvScanHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysguardn"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Spyware Protect 2009HKEY_CURRENT_USER\Software\Spyware Protect 2009HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Spyware Protect 2009

Additional Information on Spyware Protect 2009 Windows Security Alert

  • The following domains were detected:
    # Domain
    1 swp2009.com
    2 spyprotect2009.com
    3 sp-protect2009.com
    4 sys-protection.com
    5 sysguard2009.com
    6 os-protection.com
    7 spy-protect-2009.com
    8 spywprotect.com
    9 adwareguard.net
    10 antivirus-win.com
    11 spywrprotect-2009.com
    12 sysprotect.net
    13 spwprotect2009.com
    14 spy-protec.com
    15 spyware-protector-2009.com
    16 browser-security.microsoft.com
    17 antiwareprotect.com
    18 antivguardian.com
Loading...