Home » News » Rogue Antispyware » How to Remove SaveKeep, SaveKeep Removal Guide

How to Remove SaveKeep, SaveKeep Removal Guide

By Luciana on August 17, 2009 | Rogue Antispyware How to Remove SaveKeep, SaveKeep Removal Guide

SaveKeep is a fake system security tool made by the creators of the some very similar malware WiniShield, WiniFighter and WinBlueSoft. Although it may look like an actual security program, SaveKeep is actually a computer parasite.

Distributed online at the official website savekeep.com, SaveKeep is downloaded either voluntarily by the user or with the help of trojans. The program may be downloaded without the user's permission if the system does not have a proper security system. When installed, SaveKeep starts using the scare tactics to convince the user that the computer has been infected with various viruses and parasites, although the only infection is SaveKeep itself. If the computer has been infected with SaveKeep the user may also receive some fake security warnings which are also fabricated to promote the SaveKeep payed software. It is highly recommended to remove SaveKeep once it has been detected on the system.

SaveKeep websites

savekeep.com Learn how to block rogue websites

New processes created

SaveKeep.exe
SaveKeepSvc.exe
10759virz5779.exe
1052downloadzr32995.exe
104zsparse5925.exe
mob8lo23.exe
0rmwtw4x.exe Learn how to remove malicious processes

New SaveKeep registry entries created

HKEY_CURRENT_USER\Software\SaveKeep
HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveKeep
HKEY_LOCAL_MACHINE\SOFTWARE\SaveKeep
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SAVEKEEPSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveKeepSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mob8lo23.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveKeep" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\All Users\Desktop\SaveKeep.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep
c:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\1 SaveKeep.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\3 Uninstall.lnk
c:\Documents and Settings\Bleeping\Local Settings\Temp\0rmwtw4x.exe
c:\Documents and Settings\Bleeping\Local Settings\Temp\mob8lo23.exe
c:\Program Files\SaveKeep Software
c:\Program Files\SaveKeep Software\SaveKeep
c:\Program Files\SaveKeep Software\SaveKeep\data.bin
c:\Program Files\SaveKeep Software\SaveKeep\license.txt
c:\Program Files\SaveKeep Software\SaveKeep\SaveKeep.exe
c:\Program Files\SaveKeep Software\SaveKeep\SaveKeepSvc.exe
c:\Program Files\SaveKeep Software\SaveKeep\uninstall.exe
c:\WINDOWS\103215iruszef9.dll
c:\WINDOWS\104zsparse5925.exe
c:\WINDOWS\1052downloadzr32995.exe
c:\WINDOWS\10759virz5779.exe
c:\WINDOWS\10df5pyzar91105.bin
c:\WINDOWS\11145ziru95d.dll
c:\WINDOWS\111fsp5rsz1499.ocx
c:\WINDOWS\11567wo9m7z35.ocx Learn how to unregister malicious DLL files

How to remove SaveKeep

To remove SaveKeep manually you must block rogue SaveKeep related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious SaveKeep files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Delete Windows Safety Maintenance fraud

Delete Windows Safety Maintenance fraud

Windows Safety Maintenance is a rogue anti-spyware program which spreads via trojan. Once the trojan is released Windows Safety Maintenance stars fake scans and shows fraudulent results. It puts many efforts in trying to trick user into believing their PC is infected. Read more.


News categories

Latest news