How to remove/delete Secure Keeper virus/malware
// November 18th, 2009 // 1 Comment » // Malware Related
Another new rogue to hit the internet is called Secure Keeper.
SecureKeeper is downloaded in a similar way to the other rogues I have blogged about previously.
The installer was downloded from pinggost.com/download/ and promptly proceeded to take over the computer.
A randomly named file, such as KXRC7FOZ.exe is dropped into C:\DOCUMENTS AND SETTINGS\USERNAME\LOCAL SETTINGS\TEMP\, and then in turn drops many randomly named “junk” file into C:\Windows, which will have a format similar to this: 49Z5VIR1119.exe (e.g.a bunch of letters and numbers, sometimes you will be able to “see” words such as spa9mbot or downl9o76ader in them.
The “Secure Keeper” rogue uses a legitimate type installer in order to try and convince the user that it is a real application.
The default path for it’s installation is C:\Program Files\SecureKeeper Software\SecureKeeper\SecureKeeper.exe
After launching, SecureKeeper will initiate a fake “scan” that will find all of the fake files that it has dropped onto your computer (in order to simulate an infection)..which will find a lot of threats on your computer:
And naturally, to remove them you will have to pay for this “program”
It will bombards the user with scary warnings and prompts to push them into buying it and will be hard to uninstall manually, and will regularly hijack your browser and display such warnings:
If you try to click any of the buttons to remove threats, it will take you to a website such as thebillingsystem.com in order to take your “payment” and run away with your details and your money!
Now we will get onto how to remove this rogue……
The researchers Malwarebytes Anti-Malware have already analysed this threat and written definitions to completely remove Secure Keeper. All you have to do is visit their website at
http://www.malwarebytes.org/mbam.php and download Malwarebytes’ Anti Malware, install it, update it and run a quick scan which will find and remove this infection completely free of charge. If you are unsure about this program, just search for it using google and you will see that is has been given excellent reviews by places like cnet.com, and pcmag.com.
Here is a screenshot of it in action against this threat:
If Malwarebytes Anti-Malware has helped you remove Secure Keeper, please consider buying a license to say thanks and support their fight against malware- you can securely purchase a license by clicking here:
https://store.malwarebytes.org/342/?affiliate=4568&cart=29945&scope=cart – please note that this is completely optional and not a requirement for it to scan and remove Secure Keeper malware, but you will benefit in future from real time protection and regular updates that will prevent infections like this and many others installing themselves on your system!
Please leave comments to let others know how you got along, or if you run into any problems!
