How to Remove KeepCop | Keep Cop Removal Guide



KeepCop is yet another of those rogue antivirus applications that seem to be such a plague on computer users today. These rogue security applications usually installed without permission, or by means of trickery claiming to be a video codec or flash player update. Further they will start out on your computer by creating many new files in C:Windows and c:WindowsSystem32. They will then come back and scan these files and claim they have viruses. It’s basically a scam. They will find problems on any machine. Read on for how to remove Keepcop.


First off, I would go to the control panel and make use of the add/remove programs icon and try to uninstall keepcop. If it works it will make things much easier. Even if it DOES work to uninstall it you should install, update and run a scan with malwarebytes antimalware and then follow that up with a trusted antivirus product scan. This can be an online scanner like trendmicro’s housecall or it could be another trusted antivirus like avg or avira/etc.

If this hasn’t rid you of keepcop you should go ahead to the virus removal toolkit page and download a copy of malwarebytes antimalware. While you are there you may also wish to download process explorer. You may need it a bit further in the clean up process.

You may wish to go ahead and block keepcop.com to prevent further infections.

If you are unable to install malwareybtes you have a few possible options. 1) you may try renaming mbam-setup.exe to something else like iexplore.exe and retry the install, then update and scan. 2 ) reboot into safe mode with networking and then retry the installation of mbam. 3) Follow the next step which involves killing off the running processes associated with KeepCop. After that you can retry the install, update and scan with malwarebytes antimalware.

The following programs are associated with KeepCop and should be killed off using the task manager. If you are unable to launch the task manager you may try the following tricks. 1) copy and paste the taskmgr.exe executable to the desktop. Once there, rename it to something else (firefox.exe) and then retry launching it. 2) reboot into safe mode and see if the following files are running in memory. 3) Use process explorer to kill off the following processes:

302z0spam9ot5a3.exe
KeepCop.exe
uninstall.exe

The above filename may have a random component to it. Use the information above, the files listed below and what you see on your system to help you decide which files are associated with this rogue.

The following files and folders should be deleted for a manual removal of keepcop.

%docs%All UsersDesktopKeepCop.lnk
%docs%All UsersStart MenuProgramsKeepCop
%docs%All UsersStart MenuProgramsKeepCop1 KeepCop.lnk
%docs%All UsersStart MenuProgramsKeepCop2 Homepage.lnk
%docs%All UsersStart MenuProgramsKeepCop3 Uninstall.lnk
%progfiles%\KeepCop Software
%progfiles%\KeepCop SoftwareKeepCop
%progfiles%\KeepCop SoftwareKeepCopKeepCop.exe
%progfiles%KeepCop SoftwareKeepCopuninstall.exe
%win%\105019pambotzde.ocx
%win%\10527ziru9465.dll
%win%\105z9ir12765.ocx
%win%\system3230059viruz4f9.cpl
%win%\system3230077vir5zf9.dll
%win%system32302z0spam9ot5a3.exe
%tmp%RANDOMNAME.exe

Some of the file names above may contain random characters and will differ from system to system. Please use the examples and patterns you see above and what you find on your system to decide which files you need to remove. Even if your manual removal of Keepcop goes very well you will still likely have other leftovers so I would recommend that you download and scan with malwarebytes or superantispyware anyway to make certain that your system is clean. After that you should followup with a scan from a trusted antivirus application (online scan from trendmicro would be okay or something like AVG/Avira)

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove Armor Defender | Armor Defender Removal Guide Armor Defender is the latest rogue antivirus from the wini family of rogues. It takes a bit of a departure from the recent look of their rogues. However, like all of it's other cousins in the fact that it is promoted by trojan, malware and they masquerade as flash updates......
  • How to Remove ProtectPCs | ProtectPCs Removal Guide ProtectPCs is a rogue antivirus application from the Wini family of rogues. It will push itself through claims of it being a video codec update or flash player update. Usually these appear on a site that shows up in the search results for whatever latest greatest sought after video clip......
  • How to Remove AntiAdd | AntiAdd Removal Guide AntiAdd is a rogue antivirus application. It is installed via trojans that claim to be video codec or flash player updates and then once installed on the system it will claim to be scanning your computer and discovering all sorts of viral infected files. In addition to this it may......
Blog Traffic Exchange Related Websites
  • Types of Coin Collecting Software Collecting different coins is a truly pleasurable and profitable type of hobby or endeavor. Most people who are novices in collecting encounter problems relating to having too many coins, and therefore they do not have an adequate amount of information about the coins that they have or about the coins......
  • Is Social Security a Ponzi Scheme? (Part 2: An Explanation of Social Security Works) The following is a continuation of the Is Social Security a Ponzi Scheme? (Part 1). That article dealt with the history of Charles Ponzi and the original Ponzi scheme. In this article we'll cover the Social Security system in general. Social Security also works best as a pyramid There is......
  • MediaMonkey Review On the subject of music players, there are more over a few names to pick from. With the heavyweights like Media Player and JetAudio Basic 8.0.14 to prospects light on resources and at the top of configurable options like Foobar. MediaMonkey fits somewhere at the center but offers some very......
en.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site