Windows Efficiency Kit

Posted: January 25, 2014

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	42

First Seen:	January 25, 2014
OS(es) Affected:	Windows

As a new iteration of a common threat-based misleading practice, Windows Efficiency Kit may have a fresh name, but all of its tricks are the same as those exploited by past versions of similar rogue security programs. Windows Efficiency Kit uses a combination of its appearance as a fake anti-malware product, pop-up warnings that warn you about fake PC threats and some disguised attacks against your PC's software accessibility to induce you to be convinced that your PC has been compromised through multiple sources. Windows Efficiency Kit then proceeds with requesting that you spend money on registering Windows Efficiency Kit to remove the problems Windows Efficiency Kit supposedly has found. As a cheaper alternative, malware researchers recommend disabling and then removing Windows Efficiency Kit through standardized anti-malware solutions.

The Software with Great Efficiency at Implementing Anti-Malware Fraud

Windows Efficiency Kit is based off of a template that malware researchers have identified as been one of the latest updates to the FakeVimes family of scamware, a group of fake anti-malware applications that rotate the brand names that are in use regularly. Others from the same branch of FakePAV as Windows Efficiency Kit include Privacy Guard Pro, PrivacyGuard Pro 2.0, Extra Antivirus, Fast Antivirus 2009, Presto TuneUp, Windows Security Suite, Smart Virus Eliminator, Packed.Generic.245, Volcano Security Suite, Windows Enterprise Suite, Enterprise Suite, Additional Guard, Live PC Care, PC Live Guard, Live Enterprise Suite, Security Antivirus, My Security Wall, CleanUp Antivirus and Smart Security.

Windows Efficiency Kit and other members of its family are often installed through attacks that imitate the system scans of real anti-malware programs. A concluded 'scan' will prompt the user to install Windows Efficiency Kit or another member of FakePAV. Windows Efficiency Kit will continue this ruse through the abuse of various styles of misleading pop-up alerts, which malware researchers have confirmed to include entirely inaccurate information. Although Windows Efficiency Kit's primary aim simply is to steal money by encouraging you to register Windows Efficiency Kit, Windows Efficiency Kit also is a direct threat to your computer's security, like all members of FakePAV.

Getting Efficient About Deleting Windows Efficiency Kit

Educated PC users shouldn't be tricked by Windows Efficiency Kit's basic tactic, but Windows Efficiency Kit's lack of believability is protected by something extra: attacks that block most other programs on your PC. Because Windows Efficiency Kit launches with Windows and monitors your memory processes constantly for unwanted programs, this infection may result in substantially crippled software accessibility. The programs blocked by Windows Efficiency Kit's attacks may include system tools like Task Manager, as well as social networking programs like the Yahoo Messenger.

Nonetheless, in spite of Windows Efficiency Kit's many warnings, none of the programs Windows Efficiency Kit blocks have been harmed permanently or have been compromised by other PC threats. Launching Windows without Windows Efficiency Kit, such as by restarting in Safe Mode, should allow you to regain access to these programs. After Windows Efficiency Kit has been stopped from launching, you should disinfect your PC with any real anti-malware software of your preference, thereby uninstalling Windows Efficiency Kit and all other PC threats related to Windows Efficiency Kit.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%APPDATA%\svc-ikwl.exe

File name: svc-ikwl.exe
Size: 1.05 MB (1052160 bytes)
MD5: ebf8174ef1d03c19f74930a1230cee77
Detection count: 58
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: January 27, 2014