KeepMySettingsX

KeepMySettingsX

Known Malware

by InstallX, LLC

What is KeepMySettingsX?

KeepMySettingsX is software application developed by InstallX, LLC. It is most commonly found on computers running Windows 7 with nearly 50.09% of installations running this operating system. KeepMySettingsX's installer is typically 1.00 MB in size and installs around 3 files.

KeepMySettingsX is most popular in the United States with 99.29% of installations residing in this country.

KeepMySettingsX adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About KeepMySettingsX?

KeepMySettingsX is a web browser protection software designed to safeguard the home page and search settings from unauthorized modifications by third-party programs. It is commonly included as part of the InstallIQ download manager package.

Multiple virus scanners have detected malware in KeepMySettingsX.

searchprotector.exe (MD5: a8fbcc41bb026eef7d9ee5c73c180d9d) has been flagged by 8 scanners:
Scanner Software Result
Comodo Security Application.Win32.InstallIQ.B
Dr.Web Adware.Downware.1870
ESET-NOD32 probably a variant of Win32/InstallIQ.A
McAfee Artemis!A8FBCC41BB02
McAfee-GW-Edition Artemis!A8FBCC41BB02
Rising Antivirus PE:PUF.InstallIQ!1.9E4F
TrendMicro-HouseCall TROJ_GEN.F47V0121
VIPRE Antivirus InstallIQ Installer (fs)
keepmysettingsx.exe (MD5: b1fd4d3b3fb3676171fdd3320a6c3b57) has been flagged by 10 scanners:
Scanner Software Result
AVG Generic
Comodo Security Application.Win32.InstallIQ.B
Dr.Web Adware.Downware.1870
ESET-NOD32 probably a variant of Win32/InstallIQ.A
McAfee Artemis!B1FD4D3B3FB3
McAfee-GW-Edition Artemis!B1FD4D3B3FB3
Qihoo-360 HEUR/Malware.QVM06.Gen
TrendMicro-HouseCall Suspicious_GEN.F47V0613
VIPRE Antivirus InstallIQ Installer (fs)
Rising Antivirus PE:PUF.InstallIQ!1.9E4F

Software Behaviors

Scheduled tasks:
  • keepmysettingsx.exe is scheduled as a task named 'KeepMySettingsX' (runs on boot).

Startup Entries

Startup tasks:
  • keepmysettingsx.exe is automatically launched at startup through a scheduled task named KeepMySettingsX.
Registry entries:
  • keepmysettingsx.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'KeepMySettingsX' and executes as "C:\Documents and Settings\user\Application Data\KeepMySettingsX\keepmysettingsx.exe".
  • searchprotector.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'InstallX Search Protect for Yahoo' and executes as "C:\users\user\appdata\Roaming\InstallX Search Protect for Yahoo\searchprotector.exe".

Software Details

URL:
https://www.installiqlearnmore.com
Support:
Installation path:
C:\users\user\appdata\Roaming\KeepMySettingsX
Uninstaller:
"C:\users\user\appdata\Roaming\KeepMySettingsX\keepmysettingsx.exe" /uninstall
Size:
1.00 MB
Language:
English

KeepMySettingsX Executable Details

Primary executable:
keepmysettingsx.exe
Name:
KeepMySettingsX
Path:
C:\users\user\appdata\Roaming\KeepMySettingsX\keepmysettingsx.exe
MD5:
b1fd4d3b3fb3676171fdd3320a6c3b57
SHA-1:
SHA-256:
Files installed by KeepMySettingsX
File Type Filename MD5
EXE
96c5637e1eb8f8f8c34172f2d23eafc6
EXE
a8fbcc41bb026eef7d9ee5c73c180d9d
EXE
b1fd4d3b3fb3676171fdd3320a6c3b57