Threat Search: 

ThreatExpert's Statistics for RogueAntiSpyware.WinSpywareProtect [PC Tools]:

RogueAntiSpyware.WinSpywareProtect [PC Tools] is also known as:
Threat AliasNumber of Incidents
not-a-virus:FraudTool.Win32.WinSpywareProtect.eo [Kaspersky Lab]54
Troj/FakeAV-KM [Sophos]54
PWCrack-Winspy [McAfee]52
SpywareProtect2009 [Symantec]52
Virus.Win32.AdWare [Ikarus]48
RogueAntiSpyware.Sysguard [PC Tools]2
Downloader.MisleadApp [Symantec]1
Mal/EncPk-CZ, Mal/EncPk-EI [Sophos]1
not-a-virus:FraudTool.Win32.WinSpywareProtect.dy [Kaspersky Lab]1
Troj/Dloadr-CIF [Sophos]1
Troj/SWProt-Gen [Sophos]1
Trojan.Fakeavalert [Symantec]1
Trojan.Win32.FraudPack.gen [Kaspersky Lab]1
Trojan.Win32.Zbot [Ikarus]1
Trojan:Win32/FakeXPA [Microsoft]1
Trojan-Downloader.Win32.Renos [Ikarus]1
WinSpywareProtect [Symantec]1

RogueAntiSpyware.WinSpywareProtect [PC Tools] is known to be created as:
%System%\iehelper.dll
%Windir%\svcho.exe
%Windir%\sysguard.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.