MySpyProtector
MySpyProtector is a rogue Windows application that disguises as a real program and pretend to repair system errors on the computer. MySpyProtector will identify errors that are non-existent during a scan. This misleading tactic is being employed to convince users that a paid version of MySpyProtector is needed. It was found that MySpyProtector may come from fake online virus scanner and spam email messages that contains executable file.
Screen Shot Image:
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Windows Vista
Technical Details and Additional Information:
What MySpyProtector can do?
- Report exaggerated system scan results.
- The program will prompt user to pay for the registered version in order to remove detected threats.
Malicious Files Added by MySpyProtector
%ProgramFiles%\MySpyProtector\config.ini
%ProgramFiles%\MySpyProtector\Error.wav
%ProgramFiles%\MySpyProtector\MySpyProtector.exe
%ProgramFiles%\MySpyProtector\prefs.dat
%ProgramFiles%\MySpyProtector\signatures.dat
%ProgramFiles%\MySpyProtector\Spyware Remover.ini
%ProgramFiles%\MySpyProtector\unins000.dat
%ProgramFiles%\MySpyProtector\unins000.exe
Associated Windows Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\MySpyProtector_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Explorer\MenuOrder\Start Menu\Programs\MySpyProtector
HKEY_CURRENT_USER\Software\MySpyProtector
MySpyProtector – Removal
Removing MySpyProtector Manually:
1. If using Windows ME or XP, System Restore must be disabled to prevent the threat from restoring itself. [Windows XP System Restore]
2. Update the virus definitions.
3. Reboot Windows in SafeMode [how to]
4. Run a full system scan and clean/delete all infected file(s)
5. Delete/Modify any values added to the registry. [how to edit registry]
6. Exit registry editor and restart Windows.
Anti-virus Tools
Manual removal provided on this page may or may not successfully remove MySpyProtector. To completely get rid of the virus and other malicious software that may have been installed, we suggest running these tools.
In order to completely remove MySpyProtector from a system, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean PC and rename the executable file before executing on the infected machine.
Using Portable SuperAntiSpyware:
To thoroughly remove a virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Download and run SuperAntiSpyware Portable Scanner.