84,488,480 programs installed

Should I remove SProtector?

What percent of users and experts removed it?
83% remove it17% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #48,613
Reach 0.0015%
Lifespan of installation (until removal)
< 393.40 days
1242.32 days >
Average installed length: 652.74 days

SProtector 1.66

What is SProtector?

SProtector has been seen being bundled with various know adware programs including ContinueToSave, Search Assistant, JustBrowse, BrowseToSave, EasyLife Search and AppsAreFun. It has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast classifies it as a potentially unwanted program (PUP) Win32:SProtector-B [PUP] and DrWeb flags it as Adware.BGuard. The program, specifically the sprotector.dll file is loaded into Google Chrome and connects to the Internet.

Overview

The program adds a toolbar to Microsoft Internet Explorer. The main program executable is sprotector.dll. Typically most users end up uninstalling this just after a few days. The software installer includes 4 files and is usually about 704.01 KB (720,902 bytes).
  • Possible malware installed by this program
  • Loads into the web browser
  • Typically distributed through a pay-per-install bundle
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in SProtector.
sprotector.dll (605ddc5f152cd5dc0c4276d70a62a7d0) has been flagged by the following 5 scanners:
Anti-Virus softwareVersionDetection
CAT-QuickHeal 5.13.12.00 Adware.Sprotector.A3
ESET-NOD32 7.8329 a variant of Win32/SProtector.A
Sophos 4.89 Generic PUA IK
Trend Micro 10.465.23 TROJ_SPNR.0BC513
TrendMicro-HouseCall 7.2.143 TROJ_SPNR.0BC513
uninstall.exe (5cad4c7916d7e47dbdf05fc4a853e275) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
ESET-NOD32 8944 a variant of Win32/SProtector.B
Kingsoft AntiVirus 2013.4.9.267 Win32.Hack.Huigezi.sd.(kcloud)
Rising Antivirus 24.84.06.04 Trojan.Win32.Generic.14BDB127
Vba32 AntiVirus 3.12.24.3 Backdoor.Hupigon
searchInstaller.exe (238dd16a7204cb42704131d492e5db81) has been flagged by the following 3 scanners:
Anti-Virus softwareSoftware versionDetection
avast! 8.0.1489.320 Win32:Adware-BCA [Adw]
ESET-NOD32 8962 Win32/Toolbar.GadgetBox
Malwarebytes 1.75.0.1 PUP.Optional.BabylonSearch.A
gadgetBoxTB.dll (6f781a30f3168c80d00ba0a199d1cbd9) has been flagged by the following 3 scanners:
Anti-Virus softwareSoftware versionDetection
Emsisoft Anti-Malware 3.0.0.569 Riskware.Win32.Toolbar.GadgetBox.AMN (A)
ESET-NOD32 8436 Win32/Toolbar.GadgetBox
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.F47V1101
       View all 15 all detections
SProtector has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Installation folder: C:\Program Files\sprotector
Uninstaller: "C:\Program Files\SProtector\uninstall.exe" /FULLPATH="C:\Program Files\SProtector"
Estimated size: 704.01 KB

Program filesFiles installed by SProtector 1.66

Program module:sprotector.dll (Malware detected)
Name:SProtector 1.66.1133
Path:C:\Program Files\sprotector\sprotector.dll
MD5:605ddc5f152cd5dc0c4276d70a62a7d0
SProtector has been detected as 'malware' by multiple antivirus products. TrendMicro classifies it as TROJ_GEN.RCBH1L8. ESET calls it a variant of Win32/SProtector.A. QuickHeal identifies SProtector.dll as Worm.SProtector.A3. Avast...
Additional files:
  • uninstall.exe
  • (Malware detected) gadgetBoxTB.dll (by GadgetBox) - GadgetBox Toolbar for Internet Explorer (GadgetBox Toolbar For Internet Explorer)
  • (Malware detected) searchInstaller.exe

Program behaviorsBehaviors exhibited

Internet Explorer Bar
  • gadgetBoxTB.dll installs an Explorer Bar in Internet Explorer called 'GagetBox' with a class of {3B81079D-2AC9-425f-A494-A1C7D93AFA3C}.
Internet Explorer Toolbar
  • gadgetBoxTB.dll is loaded as Internet Explorer Toolbar with the name 'GagetBox' with the class of {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} (GadgetBox Toolbar).
Internet Explorer URL Search Hook
  • gadgetBoxTB.dll loads into IE as a URL Search Hook named 'GagetBox' with a class of {3B81079D-2AC9-425f-A494-A1C7D93AFA3C} in order to redirect unknown URL searches.

How do I remove SProtector?

You can uninstall SProtector from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program SProtector 1.66, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove SProtector.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by SProtector 1.66 you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 80%
Win 10 3%
 
HOW DOES IT RUN?
Plugs into Internet Explorer
 
USER ACTIONS
Uninstall it 83%
Keep it 17%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 83.33%
Windows Vista 6.67%
Windows XP 6.67%
Windows 10 3.33%
Which OS releases does it run on?
Windows 7 Home Premium 50.00%
Windows 7 Ultimate 26.67%
Microsoft Windows XP 6.67%
Windows 10 Home 3.33%
Windows 7 Enterprise 3.33%
Windows 7 Professional 3.33%

Distribution by countryGeography

14.71% of installs come from the United States
Which countries install it?
  United States 14.71%
  France 8.82%
  Germany 5.88%
  Croatia 5.88%
  Ireland 5.88%
  Italy 5.88%
  New Zealand 5.88%
  Singapore 5.88%
  Taiwan 5.88%
  Australia 2.94%
  Chile 2.94%
  Egypt 2.94%
  GA 2.94%
  Greece 2.94%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 26.92%
Dell 15.38%
Acer 15.38%
Toshiba 11.54%
ASUS 11.54%
GIGABYTE 7.69%
MSI 3.85%
Lenovo 3.85%
American Megatrends 3.85%
Common models
HP ProBook 4520s 8.00%
TOSHIBA Satellite P745 4.00%
TOSHIBA SATELLITE L750 4.00%
TOSHIBA Satellite L350 4.00%
MSI MS-7641 4.00%
MICRO-STAR INTERNATIONAL ... 4.00%

About Search Assistant SProtector

Alias distribution of the SProtector class of malware.

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.