Threat Search: 

ThreatExpert's Statistics for Troj/SWProt-Gen [Sophos]:

Troj/SWProt-Gen [Sophos] is also known as:
Threat AliasNumber of Incidents
SpywareProtect2009 [Symantec]6
not-a-virus:FraudTool.Win32.WinSpywareProtect.dx [Kaspersky Lab]4
Downloader.MisleadApp [Symantec]3
Trojan-Downloader.Win32.Renos [Ikarus]3
Adware-BHO.gen.f [McAfee]2
Generic Downloader.x [McAfee]2
not-a-virus:FraudTool.Win32.WinSpywareProtect.dy [Kaspersky Lab]2
not-a-virus:FraudTool.Win32.WinSpywareProtect.dw [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.WinSpywareProtect.et [Kaspersky Lab]1
RogueAntiSpyware.WinSpywareProtect [PC Tools]1
Trojan Horse [Symantec]1
Trojan.Fakeavalert [Symantec]1
Trojan.Generic [Ikarus]1
Trojan-Downloader.Agent!sd6 [PC Tools]1
Trojan-Downloader.Win32.Agent.beld [Kaspersky Lab]1

Troj/SWProt-Gen [Sophos] is known to be created as:
%System%\iehelper.dll
%Windir%\sysguard.exe
Notes:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.