Windows Software Keeper is a fake anti-virus program, which tries to mislead its victims into purchasing its bogus full version. Via malicious advertising methods, it manages to infect computers and convince their users they need to spend their money on the rogue’s phony services. By mimicking real AV tools, Windows Software Keeper tries to pass by as one. However, this program has no capabilities for fighting viruses since it is one itself.
Figure 1. Windows Software Keeper screenshot
There are two main methods via which cyber criminals distribute Windows Software Keeper. The first one is through the use of counterfeit online scanners. They offer a free scan of the visitor’s PC. As a result, they state that there are a number of viruses found in the computer system and prompt the user to download and install a program – Windows Software Keeper. The truth is that the online scanners, promoting Windows Software Keeper, do not have access to visitors’ computer and could not possibly detect any threats, if such are present, in it. Therefor, security experts advise never to download programs unless you are certain they are legitimate. The second method for transmitting the Windows Software Keeper infection consists of Trojans, lying in hide in hacked websites. These Trojans do not need authorization from the visitor in order to creep into a machine. Mere clicking through the corrupted website is enough for them to enter the computer system through vulnerabilities found in it. Since most vulnerabilities are caused by outdated software, we recommend you to keep all your programs up-to-date by downloading the updates only from the official websites of the products.
When Windows Software Keeper gets inside a PC, it immediately makes some malicious configurations, which enable it to start automatically as soon as Windows starts. From then on, every time the victim turns the PC on, Windows Software Keeper screen appears and performs a fraudulent scan of the system. When the scan is over, a made-up list of infections is presented. It aims at scaring the victim enough to believe that the computer needs immediate security assistance. Then, the rogue promotes its fake full version as the best security solution. However, the full version of Windows Software Keeper is also a part of the fraud, aiming at sending your money away to hackers. It cannot cope with malware pieces – it is malware itself.
In addition to the counterfeit scans, Windows Software Keeper also produces bogus alerts and notifications, warning about non-existing security threats. You can see some of these phony alerts below:
Error
Attempt to modify registry key entries detected. Registry entry analysis is recommended.
Warning
Firewall has blocked a program from accessing the Internet C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Warning! Identity theft attempt Detected
Hidden connection IP: 58.82.12.124
Target: Your passwords for sites
Windows Software Keeper’s notifications pop-up all the time, thus hampering the user’s work on the computer. Another trick, exploited by Windows Software Keeper is replacing Registry editor and Windows Task Manager with its own Advanced Process Control – it operates like a Task Manager, but is controlled by the rogue. Furthermore, the malware manages to prevent other programs from being launched by closing them as soon as the victim tries to run them.
In conclusion, Windows Software Keeper could not and would not do anything in favor of your PC’s safety. It is just one of the numerous scams via which hackers gain profit. Therefor, the best thing you can do, provided that Windows Software Keeper has found its way into your computer, is to remove the rogue immediately via a genuine AV application.
*SpyHunter’s free scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter’s malware suite to remove the malware threats.
