Remove KvmSecure. Description and removal instructions

 
Title: KvmSecure
Also known as: Kvm Secure
Type: Malware
Severity scale:KvmSecure severity is 80  (80 / 100)
 
KvmSecure is a rogue anti-spyware program, a fake spyware remover, which uses trojans to infiltrate the system and to promote the parasite. The trojans used for this purpose are usually Zlob or some variant of it. They disguise themselves as video codecs and thus enter the system, upon which they flood the user with popups and fake system notifications to "inform" him that he is infected, which he of course is not.

The misleading message looks like this:

“Spyware Threat. Your computer is infected with Spyware: Adware.Win32.Agent.rf, Packed.Win32.NSAnti.r, W32/Netsky-P. Remove All Spyware”

If you purchase the "licensed version" of KvmSecure, consider yourself scammed.

KvmSecure.com doesn't provide any contact information or any other kind of useful information for that matter. The domain is registered to "PrivacyProtect.org", which is another rogue anti-spyware.

KvmSecure is a scam and should be treated as such: do NOT download or buy it and block KvmSecure.com using your HOSTS file.


Related files: vscan.tsi, KvmSecure.lnk, KvmSecure.exe

Automatic KvmSecure removal:

remover for KvmSecure

KvmSecure manual removal:

Kill processes:
%ProgramFiles%\\KvmSecure\\KvmSecure.exe
Delete registry values:
HKEY_USERS\S-1-5-21-1172441840-534431857-1906119351-500\Software\Microsoft\Windows\CurrentVersion\Run\”KvmSecure.exe” = “43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 61 00 6D 00 20 00 46 00 69 00 6C 00 65 00 73 00 5C 00 4B 00 76 00 6D 00 53 00 65 00 63 00 75 00 72 00 65 00 5C 00 4B 00 76 00 6D 00 53 00 65 00 63 00 75 00 72 00 65 00 2E 00 65 00 78 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73 5C 4B 76 6D 53 65 63 75 72 65 5C 4B 76 6D 53 65 63 75 72 65 2E 65 78 65 00 74 61 72 74 20 4D 65 6E 75 5C 50 72 6F 67 72 61 6D 73 5C 4B 76 6D 53 65 63 75 72 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B2 1E 99 3F
HKEY_CURRENT_USER\Software\KvmSecure\”Autorun” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”TotalScans” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”Signatures” = “0″
HKEY_CURRENT_USER\Software\KvmSecure\”lastScanDate” = “130507D7″
HKEY_CURRENT_USER\Software\KvmSecure\”CheckForUpdates” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ScanProcesses” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ScanRegistry” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”BasesVersion” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”CoreVersion” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”QuickScanAtStartup” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”StartMinimized” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ID” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”lastScanTime” = “07040033″
HKEY_CURRENT_USER\Software\KvmSecure\”lastUpdateDate” = “0″
HKEY_CURRENT_USER\Software\KvmSecure\”lastUpdateTime” = “0″
HKEY_CURRENT_USER\Software\KvmSecure\”RegisterShellExtension” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ScanArchives” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ScanFiles” = “1″
HKEY_CURRENT_USER\Software\KvmSecure\”ScanMail” = “1″
Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\KvmSecure
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run kvmsecure.exe
HKEY_CURRENT_USER\software\kvmsecure
Unregister DLLs:
%ProgramFiles%\\KvmSecure\\zlib.dll

Delete files:
%UserProfile%\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\KvmSecure.lnk %UserProfile%\\Desktop\\KvmSecure.lnk %ProgramFiles%\\KvmSecure\\vscan.tsi %UserProfile%\\Start Menu\\Programs\\KvmSecure\\KvmSecure.lnk KvmSecure.exe %ProgramFiles%\\KvmSecure\\KvmSecure.exe
Delete directories:
%ProgramFiles%\KvmSecure

Other programs to remove KvmSecure:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 19/05/08
Information updated: 02/06/08

Additional resources related to KvmSecure:

Attention: If you know or you have a website or page about KvmSecure removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about KvmSecure parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by The Karate Dude. 2008-05-24 08:05:10
Thanks for the excellent virus removal instructions !!!

2. by . 2008-05-24 08:05:19
Excellent Removal Instructions !!!

3. by Dragon_SLO. 2008-05-24 05:05:49
thank you so much 4 help me out. im in hurry can't afford FORMAT C: and new installation of XP...

so i hope this solutions work..


chrees!!!


Latest spyware news:
Similar parasites: