From Wiki-Security, the free encyclopedia of computer security

Win32/FakeVimes Information
Type: Spyware
Analysis: Installs & gathers info from a PC without user permission.
Infection: By downloading freeware & shareware.
Symptoms: Changes PC settings, excessive popups & slow PC performance.
Detection Tool: >>> Download SpyHunter's Spyware Scanner <<<

SpyHunter's spyware scanner is intended to quickly scan and identify spyware on your PC. If you wish to eliminate spyware from your PC and prevent future spyware attacks, we recommend you buy SpyHunter's spyware removal tool, which includes full technical support and a Spyware HelpDesk to tackle spyware that is uniquely affecting your PC.
IE Alert:

If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

FakeVimes, also known as Win32/FakeVimes, is a family of rogue anti-spyware programs known to carry out simulated scans for malware and display bogus warnings about the existence of viruses, Trojans, spyware and other malicious program infections. These rogue anti-spyware programs by Win32/FakeVimes will go on to inform the user that purchasing the software is needed in order to remove the threats which are, in truth, non-existing. Win32/FakeVimes has many aliases, and some of these are Live PC Care, Virus Melts, Extra Antivirus, Security Antivirus File Recovery and Security Master AV.

The FakeVimes Program Infection

As already mentioned earlier, FakeVimes programs are spread using different names or aliases. These strategies on re-branding and re-packaging help to ensure that these programs are able to infiltrate as many computers as possible. Given that different variants of these FakeVimes programs are being introduced regularly, their installations may differ through the use of different file names. The manner of system modifications may also vary from one program to another, although most of these rogue anti-spyware applications from FakeVimes are downloaded through a Trojan downloader. threat analysts have noted that TrojanDownloader:Win32/FakeVimes is the Trojan responsible in downloading a Win32/FakeVimes program. The download is then saved in Documents and Settings, through a file name that indicates the initials of the alias, whether it's Live PC Care (LP) or Ultra Virus 2009 (UA2009) or any other variant.

The payloads of a FakeVimes program infection are several. These include search result redirects, which will take you to disreputable websites or cause search engine redirections. FakeVimes may also alter browser settings, modify the Windows Registry and firewall settings and disable security programs. Web browser security is also adversely affected, so that Internet Explorer may download malicious programs without prompting you first. Finally, FakeVimes will generate spurious scans and misleading alerts to further its deceitful purpose.

Preventing a FakeVimes Program Infiltration

Fortunately, there are several tried-and-tested ways for you to protect your PC from a FakeVimes program infiltration. In the first place, be certain that you have updated anti-spyware software installed in your computer. Installing updates for all software downloaded into your PC is also helpful in preventing virus threats and infections. Make sure that your firewall is enabled on your PC and that any software you download is not pirated. Before you click on web page links or accept file transfers, think twice. These may result in an advertent download of the Win32/FakeVimes Trojan. It pays to be cautious, especially if you have received email attachments from an unknown sender or if the links point to a web page you do not recognize.

According to security researchers, the prevalence of rogue anti-spyware applications – such as those coming from the Win32/FakeVimes family – has grown significantly in recent periods. Many variants of this rogueware are an actual impersonation of Microsoft security products, making their detection challenging for many PC users.
Nonetheless, you don't have to be a victim of a FakeVimes malicious program. You can delete FakeVimes from your system using authentic PC security software or prevent its infection in the first place, by ensuring caution whenever you use your PC or surf the web.

To check your computer for Win32/FakeVimes, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Win32/FakeVimes and other threats. If you detect the presence of Win32/FakeVimes on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Win32/FakeVimes.


Detection of Win32/FakeVimes (Recommended)

Win32/FakeVimes is difficult to detect and remove. Win32/FakeVimes is not likely to be removed through a convenient "uninstall" feature. Win32/FakeVimes, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Win32/FakeVimes and other spyware, adware, trojans and viruses on your computer.

Run a Win32/FakeVimes scan/check to successfully detect all Win32/FakeVimes files with the SpyHunter Spyware Detection Tool. If you wish to remove Win32/FakeVimes, you can either purchase the SpyHunter spyware removal tool to remove Win32/FakeVimes or follow the Win32/FakeVimes manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with Win32/FakeVimes. Win32/FakeVimes can come bundled with shareware or other downloadable software.

Another method of distributing Win32/FakeVimes involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Win32/FakeVimes on your system. Win32/FakeVimes installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with Win32/FakeVimes, use this SpyHunter Spyware dectection tool to detect Win32/FakeVimes and other common Spyware infections. After detection of Win32/FakeVimes, the next advised step is to remove Win32/FakeVimes with the purchase of the SpyHunter Spyware removal tool.


Win32/FakeVimes may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Win32/FakeVimes from your computer.

Remedies and Prevention

Win32/FakeVimes, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Win32/FakeVimes along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example Win32/FakeVimes, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Win32/FakeVimes and other types of spyware.

External links

If you believe your computer is infected with spyware,
Wiki-Security recommends using SpyHunter's spyware detection tool to check for the latest spyware threats.

Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by Win32/FakeVimes or its creators in any way. This website does not advocate the actions or behavior of Win32/FakeVimes and its creators. Our objective is to provide Internet users with the know-how to detect and remove Win32/FakeVimes and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of Win32/FakeVimes in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.