KeepCop is yet another of those rogue antivirus applications that seem to be such a plague on computer users today. These rogue security applications usually installed without permission, or by means of trickery claiming to be a video codec or flash player update. Further they will start out on your computer by creating many new files in C:Windows and c:WindowsSystem32. They will then come back and scan these files and claim they have viruses. It’s basically a scam. They will find problems on any machine. Read on for how to remove Keepcop.
First off, I would go to the control panel and make use of the add/remove programs icon and try to uninstall keepcop. If it works it will make things much easier. Even if it DOES work to uninstall it you should install, update and run a scan with malwarebytes antimalware and then follow that up with a trusted antivirus product scan. This can be an online scanner like trendmicro’s housecall or it could be another trusted antivirus like avg or avira/etc.
If this hasn’t rid you of keepcop you should go ahead to the virus removal toolkit page and download a copy of malwarebytes antimalware. While you are there you may also wish to download process explorer. You may need it a bit further in the clean up process.
You may wish to go ahead and block keepcop.com to prevent further infections.
If you are unable to install malwareybtes you have a few possible options. 1) you may try renaming mbam-setup.exe to something else like iexplore.exe and retry the install, then update and scan. 2 ) reboot into safe mode with networking and then retry the installation of mbam. 3) Follow the next step which involves killing off the running processes associated with KeepCop. After that you can retry the install, update and scan with malwarebytes antimalware.
The following programs are associated with KeepCop and should be killed off using the task manager. If you are unable to launch the task manager you may try the following tricks. 1) copy and paste the taskmgr.exe executable to the desktop. Once there, rename it to something else (firefox.exe) and then retry launching it. 2) reboot into safe mode and see if the following files are running in memory. 3) Use process explorer to kill off the following processes:
The above filename may have a random component to it. Use the information above, the files listed below and what you see on your system to help you decide which files are associated with this rogue.
The following files and folders should be deleted for a manual removal of keepcop.
%docs%All UsersStart MenuProgramsKeepCop
%docs%All UsersStart MenuProgramsKeepCop1 KeepCop.lnk
%docs%All UsersStart MenuProgramsKeepCop2 Homepage.lnk
%docs%All UsersStart MenuProgramsKeepCop3 Uninstall.lnk
Some of the file names above may contain random characters and will differ from system to system. Please use the examples and patterns you see above and what you find on your system to decide which files you need to remove. Even if your manual removal of Keepcop goes very well you will still likely have other leftovers so I would recommend that you download and scan with malwarebytes or superantispyware anyway to make certain that your system is clean. After that you should followup with a scan from a trusted antivirus application (online scan from trendmicro would be okay or something like AVG/Avira)
Related PostsRelated Posts
- How to Remove ProtectPCs | ProtectPCs Removal Guide ProtectPCs is a rogue antivirus application from the Wini family of rogues. It will push itself through claims of it being a video codec update or flash player update. Usually these appear on a site that shows up in the search results for whatever latest greatest sought after video clip......
- How to Remove SecureKeeper | Secure Keeper Removal SecureKeeper is a rogue antivirus application in the Wini family (with their recent new look user interface.) The Wini family is a very long running line of rogue security applications that have been producing two to three different rogues each week. Of course, the primary changes are the names, but......
- How to Remove AntiAid | AntiAid Removal Guide AntiAid is a rogue antivirus/security program that is from the Wini family of Rogues. This is a bit of a departure from much of the long recent history of these rogues due to a new user interface. This rogue (and it's family) is usually advertised (pushed would be a better......
- Types of Coin Collecting Software Collecting different coins is a truly pleasurable and profitable type of hobby or endeavor. Most people who are novices in collecting encounter problems relating to having too many coins, and therefore they do not have an adequate amount of information about the coins that they have or about the coins......
- Turn Any File into an EXE with Convert to EXE If you're a geek like me, you may on occasion have run into a situation where you had a file that you needed to convert to exe. I had read a few forum posts and tutorials on how to do this with self-extracting installers, and I even managed to do......
- Is Social Security a Ponzi Scheme? (Part 2: An Explanation of Social Security Works) The following is a continuation of the Is Social Security a Ponzi Scheme? (Part 1). That article dealt with the history of Charles Ponzi and the original Ponzi scheme. In this article we'll cover the Social Security system in general. Social Security also works best as a pyramid There is......
- How to Remove TrustSoldier | Trust Soldier Removal Guide
- How to Remove AntiTroy | AntiTroy Removal Guide
- How to Remove RESpyWare | RESpyWare Removal Guide
- How to Remove SiteVillain | SiteVillain Removal Guide
- How to Remove SecurityFighter | Security Fighter Removal