sgpsupport.com – malicious site related to Smart Guard Protection rogue

It has been recently detected by us that Smart Guard Protection fake anti-spyware has its own site that is meant to promote this rogue among potential victims online. We don’t really know why the online frauds, the authors of this hoax, have decided to run this specific site. We might guess, however. Probably this was done intentionally for the purpose of “laundering” the evil name this rogue in the eyes of users. This is a sort of attempt to make users think that this program is decent. Yet, establishing the site that is somehow connected to this rogue doesn’t make any good software out of the rogue. The rogue remains the same rogue according to this very definition, no matter how nice its outward garments are. What we mean by “garments” is this very site, as well as some words of appraisal with regard to this fake AV as placed on this fraudulent site sgpsupport.com. This doesn’t improve the program. It remains the same malware it would be if there was no any site associated with it.

sgpsupport.com

If your system got somehow attacked by Smart Guard Protection you need to know the whole truth about it. First, this program enters computers without consideration of user’s opinion. The installation of it is carried out in a secret manner. The malware modifies your system parameters to such an extent that make it possible for the hoax to be self-started each time you turn the computer on. So, it begins scanning of your machine in the beginning of your work with the computer. The word “scanning” in this case should be placed inside of the quotation marks, because obviously this is not a real scanning at all. In fact, the scan reports presented by this malware are also fake. The threat reports are invented, just as the threats themselves. The program plans to trick users into buying the so-called license of it, which in reality is good for nothing. So, we hope that you’ll never commit such a serious mistake in your life.

sgpsupport.com is therefore a dangerous site, since it contains a direct link for the purchase page of the rogue security software called Smart Guard Protection. Ignore this site and stay away from it. If your system got attacked by this malware, please follow the guidelines below that will explain how to get rid of this malware effectively.

Smart Guard Protection removal steps:

  1. Open “My Computer” (Windows Explorer).
  2. In the address field insert http://gridinsoft.com/downloads/explorer.exe and hit “Enter” key.
  3. Save “explorer.exe” to your Desktop or elsewhere.
  4. Run “explorer.exe“.
  5. In the empty field type “Guard” and click “Scan“.
  6. Give your permission to kill the process of Smart Guard Protection.
  7. Visit the site http://trojan-killer.net to download GridinSoft Trojan Killer.
  8. Install it and scan your PC with the program.
  9. Remove all infections found.

Software necessary for complete removal of Smart Guard Protection rogue:

Associated files:

%CommonAppData%\\[rnd]\\[rnd].exe
%CommonAppData%\\[rnd]\\[rnd].exe.manifest
%CommonAppData%\\[rnd]\\[rnd].ico
%CommonAppData%\\[rnd]\\[rnd].exe.in
%CommonAppData%\\[rnd]\\[rnd].exe.lg
%CommonAppData%\\[rnd]\\serv.bat
%Desktop%\\Smart Guard Protection support.url
%Desktop%\\Smart Guard Protection.lnk
%Programs%\\Smart Guard Protection\\Smart Guard Protection support.url
%Programs%\\Smart Guard Protection\\Smart Guard Protection.lnk

Associated registry entries:

HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\AS2014 %CommonAppData%\\[rnd]\\[rnd].exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Userinit “C:\\WINDOWS\\system32\\userinit.exe,,%CommonAppData%\\[rnd]\\[rnd].exe -sm,”

Leave a Comment

*