FakeVimes family

FakeVimes is a family of Rogue Antivirus programs that use designs similar to Microsoft products. There are several sub-families and designs of these rogues circulating around, though they share some common characteristics.
Typical FakeVimes fake antivirus installs around thousand registry rules that are the same for the whole family. The rules block execution of some executable names. The majority of these files belong to antiviruses. What is even more weird, it blocks some fake antiviruses as well. I do not think this is intentional, though it might help to reduce competition. FakeVimes rogues have little to do with legitimate anti-malware applications.
The regular FakeVimes rogue is relatively short lived. Majority of such parasites live around one day and are replaced. This family is adopted by scammers that believe in fast changing names and generic terms that result in little relevant results. Some more generic names of fakeVimes rogues belong to Virus Doctor family, which changes names at much slower pace and have different design. However, they are very similar to original FakeVimes infection. Another related family is the hotfix or thinkpoint one that changed names even slower.
FakeVimes changed their behaviour a bit on late 2013. New versions of these parasites block execution of programs differently, however they are relatively easy to remove once you disable the executables.
The regular FakeVimes rogues can be eliminated by Spyhunter when disabled. It detects registry modifications as well if you want to make sure you have fully fixed the registry.

Current parasites from FakeVimes clones family

Search parasites: 
 
 
Windows AntiBreach Module
 
 
Windows Antivirus Adviser
 
 
Windows Web Shield
 
 
 

Here are older FakeVimes clones that are either outdated or less active