FakeVimes family

FakeVimes is a family of Rogue Antivirus programs that use designs similar to Microsoft products. There are several sub-families and designs of these rogues circulating around, though they share some common characteristics.
Typical FakeVimes fake antivirus installs around thousand registry rules that are the same for the whole family. The rules block execution of some executable names. The majority of these files belong to antiviruses. What is even more weird, it blocks some fake antiviruses as well. I do not think this is intentional, though it might help to reduce competition. FakeVimes rogues have little to do with legitimate anti-malware applications.
The regular FakeVimes rogue is relatively short lived. Majority of such parasites live around one day and are replaced. This family is adopted by scammers that believe in fast changing names and generic terms that result in little relevant results. Some more generic names of fakeVimes rogues belong to Virus Doctor family, which changes names at much slower pace and have different design. However, they are very similar to original FakeVimes infection. Another related family is the hotfix or thinkpoint one that changed names even slower.
FakeVimes changed their behaviour a bit on late 2013. New versions of these parasites block execution of programs differently, however they are relatively easy to remove once you disable the executables.
The regular FakeVimes rogues can be eliminated by Spyhunter when disabled. It detects registry modifications as well if you want to make sure you have fully fixed the registry.

Current parasites from FakeVimes clones family


How to remove Windows Internet Guard

8 April , 2014 01:42

Windows Internet Guard is a rogue antivirus program that is distributed on computer systems through Trojan viruses. Trojans have the ability to infiltrate without users’ authorization and knowledge.
 The program belongs to Fake Vimes family of rogues, which has becomes extremely active for the last months and which regularly releases new fake antivirus programs. This […]

How to remove Windows Internet Watchdog

1 April , 2014 07:05

Windows Internet Watchdog is another rogue antispyware program from FakeVimes family, which breaks into computers through system vulnerabilities with a help of Trojan viruses. Once inside, the program makes some changes in the Windows Registry and it is configured to start automatically with each computer restart. The application imitates features of antivirus programs and tries […]

How to remove Windows Web Watchdog

31 March , 2014 01:05

Windows Web Watchdog is a rogue antivirus program from FakeVimes family of computer threats. It is an application that imitates actions of a legitimate antivirus and tries to persuade computer users to purchase it. Windows Web Watchdog can infect anyone using Windows operating systems. The program employs Trojan viruses for its distribution and it doesn’t […]

How to remove Windows AntiBreach Patrol

24 March , 2014 06:45

Windows AntiBreach Patrol is a rogue antivirus program that was designed by cyber criminals in order to steal money from random users. The application usually uses Trojan viruses to get access to random computer systems and it belongs to FakeVimes family of rogues which has recently released Windows Antivirus Patrol, Windows Pro Defence Kit, Windows […]


Here are older FakeVimes clones that are either outdated or less active