Free virus removal tool for SecureKeeper (WiniGuard)

SecureKeeper is another fake Antivirus that install itself on your computer. Once installed, it tries to trick you into buying the full version, that doesn't even exist, because the one you have is just a shareware. It shows you fake alert, don’t worry about that; I’m sure the only malware in your system is SecureKeeper.

To remove SecureKeeper from you system

• Download the free removal tool
• Extract
• Run
• Click on the delete button

After running the patch, your homepage Internet Explorer becomes search.net-studio.org, done deliberately to erase all traces of then malware, BHOs (Browser Helper Object) are also deleted. You can always restore this setting in Internet Explorer options.

Files

• %CommonDesktopDir%\SecureKeeper.lnk
• %CommonPrograms%\SecureKeeper\1 SecureKeeper.lnk
• %CommonPrograms%\SecureKeeper\2 Homepage.lnk
• %CommonPrograms%\SecureKeeper\3 Uninstall.lnk
• %Temp%\nsq2.tmp\nsProcess.dll
• %ProgramFiles%\SecureKeeper Software\SecureKeeper\uninstall.exe
• %ProgramFiles%\securekeeper software\securekeeper\securekeeper.exe

Process

• [RANDOM CHARACTERS].exe
• SecureKeeper.exe

Alias

• WiniGuard [Symantec]
• not-a-virus:FraudTool.Win32.SecureKeeper.a [Kaspersky Lab]
• Trojan:Win32/FakeSmoke [Microsoft]

Registry

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecureKeeper
• HKEY_LOCAL_MACHINE\SOFTWARE\SecureKeeper
• HKEY_CURRENT_USER\Software\SecureKeeper
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecureKeeper
  
  • DisplayName = "SecureKeeper"
  • UninstallString = ""%ProgramFiles%\SecureKeeper Software\SecureKeeper\uninstall.exe""
  • NoModify = 0x00000001
  • NoRepair = 0x00000001
• HKEY_LOCAL_MACHINE\SOFTWARE\SecureKeeper
  
  • Lang = "English"
  • Install_Dir = "%ProgramFiles%\SecureKeeper Software\SecureKeeper
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  
  • SecureKeeper = "%ProgramFiles%\SecureKeeper Software\SecureKeeper\SecureKeeper.exe -min
• HKEY_CURRENT_USER\Software\SecureKeeper
  
  • CurrentVersion = "771eb5b6f272744584a5567cff88f8a7..."
  • AgentsSettings = 0x00000001