• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove SaveKeep (Uninstall instructions)

Myantispyware team August 16, 2009    

SaveKeep is a rogue antispyware program from WiniGuard scareware family (WiniShield, WiniFighter, etc). This rogue uses fake security alerts, exaggerated scan results in order to trick you into buying the software. Once SaveKeep is installed, it configures itself to run automatically every time, when your PC starts. Immediately after launch, SaveKeep will scan your computer and list a lot of threats that cannot be removed unless you first purchase the software, but all of these infections are fake or exaggerated, so you can safely ignore them.

SaveKeep
SaveKeep (more screen shoots 1, 2, 3, 4, 5)

While SaveKeep is running your computer will display fake security alerts from your windows taskbar and nag screens. Also it will show fake Windows Security Center that will recommend you use SaveKeep. Instead of doing so, follow these SaveKeep removal instructions below in order to remove this infection and any associated malware from your computer for free.

Symptoms in a HijackThis Log

O4 – HKCU\..\Run: [SaveKeep] C:\Program Files\SaveKeep Software\SaveKeep\SaveKeep.exe -min
O23 – Service: SaveKeep Security Service (SaveKeepSvc) – Unknown owner – D:\Program Files\SaveKeep Software\SaveKeep\SaveKeepSvc.exe

Use the following instructions to remove SaveKeep (Uninstall instructions)

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for SaveKeep infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

SaveKeep_mbam
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start SaveKeep removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

SaveKeep creates the following files and folders

C:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep
C:\Program Files\SaveKeep Software
C:\Program Files\SaveKeep Software\SaveKeep
C:\Program Files\SaveKeep Software\SaveKeep\SaveKeep.exe
C:\Program Files\SaveKeep Software\SaveKeep\SaveKeepSvc.exe
C:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\1 SaveKeep.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\2 Homepage.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\SaveKeep\3 Uninstall.lnk
C:\Program Files\SaveKeep Software\SaveKeep\data.bin
C:\Program Files\SaveKeep Software\SaveKeep\license.txt
C:\Program Files\SaveKeep Software\SaveKeep\uninstall.exe
C:\Documents and Settings\All Users\Desktop\SaveKeep.lnk

SaveKeep creates the following registry keys and values

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\savekeepsvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\savekeepsvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\savekeepsvc
HKEY_LOCAL_MACHINE\SOFTWARE\SaveKeep
HKEY_CURRENT_USER\SOFTWARE\SaveKeep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveKeep
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SaveKeep

Rogue Anti Spyware Tutorials - HowTo

 Previous Post

How to remove Total Security 2009 (Uninstall instructions)

Next Post 

How to remove SaveSoldier (Uninstall instructions)

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply

New Guides

Anchomoross.com Virus Removal Guide
scam alert
Fake or Real? You Visited Some Hacked Websites With Exploit Email Scam Explained
scam alert
Spotify Can’t Process Your Payment Scam Alert: A Phishing Email to Avoid
IFMAGIC GLP-1 Pro Weight Loss Oral Solution Review, Scam or Legit? What You Need to Know
LilCooler Portable AC Review, Scam or Legit? What You Need to Know

Follow Us

Search

Useful Guides

Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide
How to remove pop-up ads [Chrome, Firefox, IE, Opera, Edge]
remove android virus
How to remove virus from Android phone
Best free malware removal tools
Best Free Malware Removal Tools 2025
ads by adware
How to remove Adware from Windows 10 (Virus removal guide)

Recent Guides

How to remove Total Security 2009 (Uninstall instructions)
How to remove WiniShield (Uninstall instructions)
How to remove Windows Protection Suite (Uninstall instructions)
How to remove PC Antispyware 2010 (Uninstall instructions)
How to remove Windows System Suite (Uninstall instructions)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.