Windows Software Keeper

Threat Scorecard

Ranking: 1,119
Threat Level: 20 % (Normal)
Infected Computers: 35,124
First Seen: March 19, 2012
Last Seen: September 20, 2023
OS(es) Affected: Windows

Windows Software Keeper Image

Since 2009, the FakeVimes family of malware has attacked computer systems all around the world. Windows Software Keeper and its clones are not particularly innovative; carrying out the same tired attack that malware in this family has been carrying for several years. Among its distinctive traits is the fact that malware in the FakeVimes family tends to use file names made up of three random characters. The most recent batch of fake security programs belonging to this family tends to precede these three random characters with a prefix (for example, 'protector') followed by a hyphen and then the three characters (in the previous example, the file name could be something like 'protector-xxx.exe').

This family of rogue security applications has a large number of clones of the same fake security program. Clones of Windows Software Keeper include Virus Melt, Presto TuneUp, Fast Antivirus 2009, Extra Antivirus, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, PC Live Guard, Live PC Care, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus, Smart Security, Windows Protection Suite, Windows Work Catalyst.

Windows Software Keeper uses the prefix 'inspector', creating file names with the format: 'inspector-xxx', where 'xxx' stands for three random characters, followed with the corresponding extension (for example, .exe or .tmp). The presence of Windows Software Keeper on your computer system indicates a severe problem and is usually part of a large-scale malware attack. Steps should be taken to remove Windows Software Keeper and its associated malware immediately with the assistance of a dependable anti-malware program.

How Windows Software Keeper and Its Clones Steal Their Victims’ Money

The main purpose of the Windows Software Keeper scam is to convince computer users to hand over their cash in exchange for a fake security program. ESG security analysts have detected no anti-malware capabilities within the Windows Software Keeper application, despite the fact that Windows Software Keeper is marketed as a reliable anti-malware tool and that everything about its interface indicates that Windows Software Keeper is a supposed security program.

In fact, beyond its interface, Windows Software Keeper is little more than a collection of malicious scripts. Windows Software Keeper makes changes to the Windows Registry. These changes allow Windows Software Keeper to start up automatically when Windows is launched, displaying constant misleading error messages and fake warnings. Inexperienced computer users may panic from these fake system alerts, being coerced into purchasing a license, or 'full version', of Windows Software Keeper. The criminals behind this fake security program have no scruples, and it is definitely not in your best interest to give them access to your credit card information or to hand over your money in exchange for a useless bogus security application.

Windows Software Keeper Video

Tip: Turn your sound ON and watch the video in Full Screen mode.

File System Details

Windows Software Keeper may create the following file(s):
# File Name Detections
1. %appdata%Inspector-[rnd].exe
2. %appdata%pswf32.dll
3. %commonprograms%Windows Software Keeper.lnk
4. %desktopdir%Windows Software Keeper.lnk

Registry Details

Windows Software Keeper may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run!Inspector

URLs

Windows Software Keeper may call the following URLs:

fugles.net

Trending

Most Viewed

Loading...