Keep Center Keeper

Threat Scorecard

Ranking: 3,776
Threat Level: 20 % (Normal)
Infected Computers: 9,797
First Seen: July 15, 2012
Last Seen: September 20, 2023
OS(es) Affected: Windows

Keep Center Keeper is a redundantly-named fake anti-virus program that uses misleading information in order to scam inexperienced computer users. Like most rogue security programs from the FakeVimes family, Keep Center Keeper uses numerous fake error messages and annoying pop-up alerts in order to scare inexperienced computer users into paying for a fake 'full version' of this malicious security program. Keep Center Keeper also makes harmful changes to the infected computer settings in order to launch itself automatically and foil legitimate security software installed on the infected machine. The goal of a Keep Center Keeper infection is to gain the victim's credit card information as well as convince the victim to pay for an expensive 'upgrade.' ESG malware researchers strongly advise removing Keep Center Keeper with a reliable, legitimate anti-malware application.

ESG malware researchers first received reports of Keep Center Keeper infections in July of 2012. This means that if your anti-malware software is not updated to that date it may not be able to recognize Keep Center Keeper as the malware infection that Keep Center Keeper is. Keep Center Keeper uses a common approach for these kinds of fake security programs, with an external appearance that is very similar to legitimate security applications, but without any of these programs' anti-malware capabilities. Keep Center Keeper is merely designed to display alarming error messages. Because of this, ESG security analysts strongly recommend ignoring all error messages and alerts that Keep Center Keeper displays, since these are misleading at best, and outright lies most of the time.

ESG security researchers have noted that Keep Center Keeper can make modifications to the Windows Registry that allow Keep Center Keeper to disable many of the most popular security applications on the market. It can also disable Windows components, such as the Windows Registry Editor and the Windows Task Manager, that are useful in removing malware infections similar to Keep Center Keeper. Keep Center Keeper also makes changes to the infected computer system's security settings and can often cause browser redirects or cause the victim's computer system to perform poorly. Keep Center Keeper may be detected under a number of aliases, including Trojan:Win32/Tibs, Trojan.Generic.KDV.672632, Win32:Downloader-PLM [Trj] and Trojan.Win32.FakeAV.nmut. This depends entirely of the anti-malware product used to scan the infected computer. To bypass Keep Center Keeper's self-protection capabilities, ESG security analysts recommend either booting Windows in Safe Mode or from an alternate boot method (such as an external memory device).

There are many clones of Keep Center Keeper. Among these clones, we can mention Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

File System Details

Keep Center Keeper may create the following file(s):
# File Name Detections
1. %AppData%\[RANDOM CHARACTERS].exe
2. %CommonStartMenu%\Programs\Keep Center Keeper.lnk
3. %Desktop%\Keep Center Keeper
4. %AppData%\result.db

URLs

Keep Center Keeper may call the following URLs:

theglossonline.com

Trending

Most Viewed

Loading...