InfoKeeper

- InfoKeeper is a rogue security program which should not be confused with the record-keeping software of the same name.
- InfoKeeper first started drawing attention in the late spring of 2011.
- InfoKeeper is thought to have been created in Korea.
- InfoKeeper's interface is in Korean, and targets users from Korea by appearing to be a legitimate anti-spyware program.
- InfoKeeper is usually distributed in file sharing websites and specific Infokeeper attack websites.
- InfoKeeper will try to steal your money by convincing you your computer is in trouble.
- InfoKeeper is a severe security problem and should be removed immediately.
 

Symptoms of an InfoKeeper Infection

InfoKeeper uses a Trojan to enter infected computers. Once downloaded and installed, InfoKeeper makes numerous malicious changes to the infected operating system. InfoKeeper has many symptoms typical to rogue security applications. To scare you, InfoKeeper will use constant error messages and pop-up notifications. InfoKeeper will start up along with Windows and will make it very hard to exit the InfoKeeper window. Once InfoKeeper starts up, InfoKeeper performs a fake system scan that returns very negative results. InfoKeeper will try to alarm the computer user by claiming there are numerous infections on the computer. Don't fall for the fictitious alerts; the main thing infecting your computer is InfoKeeper itself.
 

Other Ways InfoKeeper Can Mess With Your Computer

InfoKeeper has been known to take over the Internet Browser. This means that it will constantly redirect the computer user to InfoKeeper websites, which may contain further threats to your security. Other ways in which InfoKeeper affects browsing is by displaying constant fake security alerts for harmless websites and changing your browser's security settings and home page. In an attempt to protect itself, InfoKeeper can also prevent you from opening your real anti-spyware applications.
 

Websites Associated With InfoKeeper

The best way to prevent any attacks is by avoiding websites that have been associated with InfoKeeper. Updates for anti-malware applications will usually update a blacklist of websites, which will necessarily include websites associated with InfoKeeper. The main homepage for InfoKeeper is infokeeper.co.kr, which hijacks your web browser. Visiting it results in a Trojan attack. File sharing websites have also been associated with InfoKeeper. One such website is lastdownload.com.
 

How To Regain Control of Your Computer?

The difficult part of removing InfoKeeper is that this program protects itself. Therefore, it is necessary to run an anti-malware application before the InfoKeeper fake scan starts up. This requires special steps because InfoKeeper alters the Registry so that InfoKeeper will start up first. There are several ways you can bypass this:

- Starting up Windows in Safe Mode.
- Using an external device like a CD or USB storage unit to boot.
- Using a different operating system previously installed on your computer.

File System Details

InfoKeeper may create the following file(s):
# File Name Detections
1. c:\program files\Ifkpr\Ifkmain.exe
2. c:\program files\Ifkpr\IfkUn.exe
3. C:\Documents and Settings\\Desktop\ifk_stdsti.exe
4. c:\program files\Ifkpr\ifkr1.baf
5. c:\program files\Ifkpr
6. c:\program files\Ifkpr\ifk.wax
7. c:\program files\Ifkpr\log\20110515.mpl
8. c:\program files\Ifkpr\icon.ico
9. c:\program files\Ifkpr\ifkr2.baf
10. c:\program files\Ifkpr\log

Registry Details

InfoKeeper may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Trending

Most Viewed

Loading...