Kaspersky
Question

KVRT Detected As A Malware ?

  • 15 June 2021
  • 4 replies
  • 86 views

Hello ! I downloaded Kaspersky Virus Removal Tool (KVRT.EXE) from Kaspersky Official link 

(https://www.kaspersky.com/downloads/thank-you/free-virus-removal-tool )

But when I scanned with VirusTotal, one of antivirus was detecting KVRT as a malware. I also checked its behavior with VT Josebox. The result was really unexpected, it was detected as a malware and contains software that bypass os protection and also keylogger? 

Virus total link : https://www.virustotal.com/gui/file/f3de40bebd1801abaf07b23db2421e04789c255615aa81613f4524cb839b30e9/behavior/VirusTotal%20Josebox

VT Josebox : Automated Malware Analysis Report for kvrt_2.exe (commondatastorage.googleapis.com)

I’m really scared and curious about this exe file, is that really malware or just false positive? 

I hope you guys can clarify this as soon as possible 

Thank you  


This topic has been closed for comments

4 replies

Userlevel 7
Badge +4

Welcome, Please send the one other vendors false positives to the one other vendor.

Userlevel 7
Badge +5

Hello,

BTW.Please check whether the Kaspersky Virus Removal Tool installation file digital signature is existed or not.

Regards.

Hello,

BTW.Please check whether the Kaspersky Virus Removal Tool installation file digital signature is existed or not.

Regards.

Hello, thank you for answering my question.

But , I've deleted that KVRT program and replaced it with the newer one 7 days ago. I also have been checking the digital signature of my newer KVRT program and the result  that digital signature is okay.

Userlevel 7
Badge +5

Hello,

BTW.Please check whether the Kaspersky Virus Removal Tool installation file digital signature is existed or not.

Regards.

Hello, thank you for answering my question.

But , I've deleted that KVRT program and replaced it with the newer one 7 days ago. I also have been checking the digital signature of my newer KVRT program and the result  that digital signature is okay.


Hi @AutonShu12 

That‘s OK. You don't worry about it.

Regards.