Introduction about Windows Software Keeper:
Windows software keeper is a fake antivirus program that is spread through Trojans and comes into your system if your system is not well protected. It gets advantage of your security flaws, and once it enters the system, it does not need the user’s authority to install the application. Its trick is to show you false viruses, infections and security warnings and ask you to buy full version to remove the errors. Once this application is installed you cannot remove it easily, mainly because your antivirus software will not detect it. All the pop up security warnings and viruses’ information will make anyone hyper and you will be thinking of buying the license to get rid of the viruses. Do not trust the reports generated by Windows software keeper as these are all bogus; none of the virus or infected file exists on your system.
The Windows software keeper, after completing the installation on your computer, runs a complete scan of your computer. This scan will show you that your system is severely infected by viruses. It will show you some security alerts regularly and ask you to clean your computer as soon as possible. Some errors that are shown by the application are:
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Attempt to run a potentially dangerous script detected.
Full system scan is a highly recommended.
Key logger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.
Instructions on Removing Windows software keeper
Follow the instructions mentioned below to manually remove the Windows software keeper completely and make your system safe and secure.
Remove Windows software keeper processes
- Go to Start and click on Run.
- Type taskmgr and press Ok or you can directly open task manager by pressing the short keys CTRL+ALT+DEL.
- In the task manager click on the Processes tab. This will show you the active processes, find the required process ‘Protector-[Random].exe’, then right click on the process and then select End process to kill the process.
Remove Windows Software Keeper registry
- Click Start then select Run
- Type ‘regedit’ and click Ok.
- This command will open the Registry editor which will have two panes.
- To find a registry key click on Edit and then click on Find. On the search bar type windows software keeper registry key and select Ok.
- Now right click on the found result and select Modify and then click on Delete.
The registry keys you need to find are:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoupdate.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\antivirus.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = 2012-3-5_1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
Remove Windows Software Keeper DLL library
- Go to Start and click Search.
- Select For files and folders.
- Type the file name ‘NPSWF32.dll’ and select the option Local hard drives.
- Right click on the found result and select Delete.
Remove Windows Software Keeper Data Files
1. Click Start then click on Run
2. Type ‘cmd’ and click Ok.
3. If you know the directory where the windows process director is located type the directory else type ‘dir’ to know the directory.
4. Once you have found the DDL file type ‘regsvr32 /u DDLFileName.dll’ and pres Enter.
The files you need to locate are:
%CommonStartMenu%\Programs\Windows Software Keeper.lnk
%Desktop%\Windows Software Keeper.lnk