KvmSecure

20 May 2008 Unwanted Program 1 Comment

KvmSecure is rogue computer protection software that may be installed on computers without user’s consent. This potentially unwanted application also displays fake alerts in order to convince victim that viruses and Trojans endangers the computer.

KvmSecure usually infiltrate the system involving manual execution from user. It will embed malicious code into legitimate shareware applications and made them available to certain file-sharing networks and software download web sites. When installing the legitimate file, KvmSecure also loads itself in the background without user’s knowledge.

After installation, KvmSecure provides a virus scan that exhibits fabricated results containing dozens of identified threats. Remember that rogue programs typically employ this scare tactics to persuade victims into paying for the full version of KvmSecure.

Acquiring KvmSecure will not resolve current issues. The only solution is to obtain a legitimate anti-malware program and perform a thorough scan on the infected computer. This ensures that files and other components by KvmSecure are removed completely.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Behavior
KvmSecure continuously attempt to convince user that computer is infected with viruses. It will display phony security warnings that may contain the following messages and threats:

Warning!
Spyware Threat
Your computer is infected with Spyware
- Adware.Win32.Agent.rf
- Packed.Win32.NSAnti.r
- W32/Netsky-P
Remove All Spyware

Added Registry Entries:

HKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\Software\Microsoft\Windows\CurrentVersion\Run\"KvmSecure.exe"

Associated Files and Folders:

%ProgramFiles%\KvmSecure\Infected
%ProgramFiles%\KvmSecure\Suspicious%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\KvmSecure.lnk
%UserProfile%\Desktop\KvmSecure.lnk
%UserProfile%\Start Menu\Programs\KvmSecure\KvmSecure.lnk
%ProgramFiles%\KvmSecure\KvmSecure.exe
%ProgramFiles%\KvmSecure\vscan.tsi
%ProgramFiles%\KvmSecure\zlib.dll

Automatic Removal of KvmSecure using Malwarebytes' Anti-Malware

In order to completely remove the threat, it is best to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.