AntiKeep Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCart

AntiKeep is a fake anti-spyware program that comes from the same group that created other rogues such as RESpyWare, AntiAdd and REAnti. AntiKeep uses similar methods as those rogues to persuade computer users into purchasing a full version of AntiKeep. Usually these actions include displaying bogus popup warning messages and returning several falsified system scan results.

AntiKeep is not a trusted security program and does not have the ability to detect or remove legitimate spyware parasites. It is highly suggested that AntiKeep be detected and removed with a trusted spyware detection tool.

Type: Rogue AntiSpyware Programs

How Can You Detect AntiKeep?

AntiKeep Technical Report

As new AntiKeep details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following AntiKeep files with its MD5s were created in the system:

AntiKeep has typically the following processes in memory:

• AntiKeep.exe
• %Program Files%\AntiKeep Software\AntiKeep\uninstall.exe
• %Program Files%\AntiKeep Software\AntiKeep\AntiKeep.exe

AntiKeep created the following directories, files, paths:

• %ProgramFiles%\AntiKeep Software\AntiKeep
• %AllUsersProfile%\Start Menu\Programs\AntiKeep

AntiKeep creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\AntiKeep
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiKeep
• AntiKeep
• HKEY_CURRENT_USER\Software\AntiKeep
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AntiKeep.exe”

Important Article Disclaimer