Home Malware Programs Rogue Anti-Spyware Programs Windows Secure Kit 2011

Windows Secure Kit 2011

Posted: February 21, 2012

Threat Metric

Ranking: 1,949
Threat Level: 2/10
Infected PCs: 33,944
First Seen: February 21, 2012
Last Seen: June 23, 2022
OS(es) Affected: Windows

Windows Secure Kit 2011 is a clone of Windows Web Security and Apple Web Security, two rogue anti-malware programs that have been noted for their attacks since mid-2011. In addition to having its own host site, Windows Secure Kit 2011 is also distributed through malicious advertisements that circulate on unrelated sites, and SpywareRemove.com malware experts suggest that you be cautious about interaction with unusual advertisements that could serve as Windows Secure Kit 2011 installation platforms. Although Windows Secure Kit 2011, like its clones, can't detect or remove PC threats, Windows Secure Kit 2011 will still portray fake evidence of nonexistent Trojans, viruses and other forms of malicious software. If you install Windows Secure Kit 2011 either deliberately or by mistake, you should take immediate steps to remove Windows Secure Kit 2011 with legitimate anti-malware software, since Windows Secure Kit 2011 doesn't have real security features and has been linked to attacks that include browser redirects.

How the Windows Secure Kit 2011 Gets Delivered Straight to Your PC

As a very recent variant of other types of scamware from its family, Windows Secure Kit 2011 may require up-to-date versions of anti-malware threat databases to be detected and removed. At the time of this writing, current Windows Secure Kit 2011 installation methods have been known to use two separate techniques, both of which are browser-based, as noted below:

  • Windows Secure Kit 2011 has been known to be promoted by browser hijackers that are installed on your PC without your permission and create Windows Secure Kit 2011-related pop-ups to prompt you to install Windows Secure Kit 2011. These browser hijackers should be considered malicious and be removed via system scans with appropriate security software, and may include other functions, along with their Windows Secure Kit 2011-marketing efforts. Side effects can encompass random redirects to unrelated pornographic or gay lifestyle websites.
  • SpywareRemove.com malware research team has also revealed malicious advertisements that promote Windows Secure Kit 2011. These advertisements may be hosted at unrelated sites like tubemotion.com and will encourage you to interact with them via fraudulent pretenses (such as offering a free iPod). After the click, you're redirected to xxx59.homelandinfo.uni.me or another website that hosts Windows Secure Kit 2011.

In either case, the installation prompt for Windows Secure Kit 2011 is likely to include the following message:

"Windows Secure Kit 2011 has found critical process activity on your PC and will perform fast scan of system files!"

Unwrapping the Windows Secure Kit 2011's Bundle of Woes

Windows Secure Kit 2011 will launch itself without your consent and attempt to fake scans of your PC on a semi-regular basis. System scans by Windows Secure Kit 2011 will portray your computer as being infected by dozens of PC threats, and Windows Secure Kit 2011 may also supplement these scans with equally-inaccurate pop-up warnings. Although Windows Secure Kit 2011 will be quick to ask for your credit card information so that its premium version can remove these problems, SpywareRemove.com malware experts recommend that you ignore Windows Secure Kit 2011's fake security tactics and save your money.

Since Windows Secure Kit 2011 may be installed with supporting PC threats, you should scan your entire PC with a trustworthy anti-malware product to be certain of removing Windows Secure Kit 2011 and related infections. Unlike most types of scamware, Windows Secure Kit 2011 has been confirmed to be cross-platform, and variants of Security Shield 2012 may infect either Windows or Mac-based computers.

Windows Secure Kit 2011 belongs to the WinWeb Security family, which includes members such as Antivirus Security, System Security, AntiSpyware Pro 2009, Total Security, Total Security 2009, Security Tool, Trojan.RogueAV.a.gen, System Adware Scanner 2010, FakeAlert-KW.e, Advanced Security Tool 2010, System Tool 2011, Security Shield, MS Removal Tool, Personal Shield Pro, Advanced PC Shield 2012, Security Sphere 2012, Futurro Antivirus and Antivirus Center.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Windows Secure Kit 2011 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Secure Kit 2011.lnk File name: %AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Secure Kit 2011.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%System%\drivers\UAC[RANDOM CHARACTERS].sys File name: %System%\drivers\UAC[RANDOM CHARACTERS].sys
File type: System file
Mime Type: unknown/sys
Group: Malware file
C:\Documents and Settings\User Name\Local Settings\Temporary Internet Files\Content.IE5\4SOEDFRR\setup.exe File name: C:\Documents and Settings\User Name\Local Settings\Temporary Internet Files\Content.IE5\4SOEDFRR\setup.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\WINDOWS\system32\02612.exe or any other random number File name: C:\WINDOWS\system32\02612.exe or any other random number
Mime Type: unknown/exe or any other random number
Group: Malware file
C:\Documents and Settings\User Name\Local Settings\Temp\[RANDOM CHARACTERS].exe File name: C:\Documents and Settings\User Name\Local Settings\Temp\[RANDOM CHARACTERS].exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CustomizeSearch=[site address]

One Comment

  • Goodman London says:

    Please how much is your Spyhunter's malware tool? I have Norton 360 on my system, how come windows secure kit could function undetected in such an environment?