Subscribe to Malware Help RSS Feed RSS Feed - Subscribe to Malware Help. Org on Twitter Follow on Twitter - Malware Help YouTube Channel YouTube Channel - Subscribe to Malware Help by Email Subscribe by Email

How to Remove Malware with Free Kaspersky Virus Removal Tool

by Shanmuga| Tweet This | Google +1 | Facebook | Stumble It | Reddit | Digg |

Kaspersky Virus Removal Tool is a fully functional, on-demand and frequently updated utility that can detect and remove viruses, Trojans, worms, Spyware, Adware and rootkits from a PC. This tool is highly configurable, options to scan particular folders, scan depth customization, use combination of signature detection and heuristic analyzer, rootkit deep scan etc are available.

Kaspersky virus removal tool

This can be used as an on-demand scanner to supplement your installed antivirus software for periodical scans or when malware strikes your computer and you are unable to run the resident antivirus. This is an ideal utility to try and clean an existing infection from your computer as this tool supports running in Windows safe mode and from an USB flash drive. This freeware requires to be run under an user account with administrative privileges.

Using a clean computer, download the latest version of Kaspersky Virus Removal Tool from Kaspersky – Direct Download.

Copy the downloaded setup file to an USB flash drive, when you are trying to clean an infected system.

Boot in to Windows Safe mode, especially if you are trying to clean an infected system.

Click to run the setup.exe file

Click browse to change the installation location. Choose your USB flash drive and click OK and then click Next.

The setup will extract the files to Virus Removal Tool folder in your selected location and the main Kaspersky Virus Removal Tool window will open.

Automatic Scan

Place a check mark in the box next to and then click on the Recommended setting to modify various scan settings. Here it should be noted that changing the default scan settings is likely to increase the time taken to complete the scan, but it will be the most complete scan of the entire computer. I recommend customizing the settings if you suspect that a virus has infected your computer.

In the settings window, click on Additional tab and then move the Heuristic Analysis slider to deep scan

Now place a check mark in the box next to Deep scan in the Rootkit scan section. Click OK to save your settings.

In the main window, click Start Scan to start the scan. The cleaning process is interactive with an alert window popup for every infection and the user to allowed to choose any option between Disinfect, Delete and Skip. The detection and disinfection/deletion process may be saved to a text file. The Report window lists the malware found and action taken. Right clicking on an item provides many options.

Once the process is completed, click the Exit button on the main window to unload and uninstall the program.

Manual disinfection

The Manual disinfection mode is useful when the automatic scan could not perform full cleanup of all Malware. In the Manual Cure mode, a system information log is sent to Kaspersky experts for analysis and the cure is usually through interactive scripting language. If the system information collection scan hangs, try to run it in safe mode.

In the main window click on Manual disinfection tab and then click Gathering System Information, to start the process. Once the process is completed the report file may be sent to the Kaspersky support forum for free analysis and cure.

It is advisable to uninstall the program as malware change and mutate rapidly. This copy of the Kaspersky Virus Removal Tool will be outdated by the time you need it again as it has no definition update function. It’s best to download the software containing the latest virus definition database only when you actually need it.


  • If the Kaspersky Virus Removal Tool was closed due to any reason, you can restart it by running start.exe found in the installation folder.
  • If the automatic uninstall fails when exiting the application, you may manually remove it by running unins000.exe from the installation folder.

{ 12 comments… read them below or add one }

Virus Removal Tool December 29, 2010 at 7:52 PM

I don’t like the kaspersky software at all, to be honest. Though I must admit the removal tools they offer are not bad and are a lot easier to use than going deep into the reg keys and removing it manually, still it’s a little slow (considering it’s so small) and can fail at time, at least this is what I heard from users.


Lester Spratt May 15, 2011 at 2:38 AM

I just ran this program on my sister’s computer and I am not happy with it at all. First, there was no “settings window” to be found with any amount of clicking or right-clicking. I ran an autoscan as apparently suggested in the instructions, but the pop up windows for infections found disappeared before allowing me to choose disinfect, delete or skip. Then on the report, many objects were listed and some were marked with the result “postponed.” No amount of clicking, right-clicking, or double-clicking would bring up a process window like the one shown, and there was no option to “disinfect all” shown at the bottom left, so I have no idea if these objects were dealt with. Trash, trash, trash.


Karen Lowrey June 30, 2011 at 9:50 PM

The settings option pops up when you click the “recommended” link as stated in the instructions. If you make sure you have everything exactly as listed in the instructions, there is no reason it shouldn’t work.

Jamie Lotze June 24, 2011 at 8:38 AM

Did it’s job! And it does have the setting button,,,u just need to find it.


april June 30, 2011 at 1:41 AM

Perfect! thanks so much for the information. Worked perfectly.


Patricia Hayden July 17, 2011 at 11:42 PM

Thank you for this product. It got rid of the fake windows security center virus.


Jennifer S August 4, 2011 at 11:18 PM

Thank you Thank you!! this worked absolutely perfectly! I am no computer whiz and followed the instructions by downloading Kaspersky to a USB flash drive and as soon as it booted up before the “security” alerts popped up ran it. It found and removed them, my computers back to normal! thank you again what a life saver!


john a September 23, 2011 at 6:29 AM

followed instructions holding f8 key on infected pc. just as program was finishing downloading files befor loading to install popup the virus popup would appear saying the program was infected with whatever (it changes) (also halting forward progress) and then asks me again if i would like to purchas the program to repair everything (only $79.00). oh well guess i’ll try a different virus program btw i am a complete novice at this im surprised i even got the kaspersky program in my infected pc.. well maybe i gotta get one of those usb flashdrive thingamajigs


christine December 23, 2011 at 6:08 AM

Thank you!! Worked like a charm! Have (unfortunately!:) had to use this awesome tool twice as someone in our house keeps going to a site that is infected with a fake Windows Security program. This was Easy to install from CD drive while in “safe mode” (F8) even though the virus was popping up like crazy! The first time I couldn’t get my computer to even start. I had to remove the battery (laptop) to get it to “unlock” and then restart while pressing the F8 key over and over. Finally got it going. I also installed the Malware Bytes program, but then uninstalled it, so I got reinfected. This time the virus did not lock me out, but it was very persistent about continuing to restart itself. I ran the Kaspersky utility once with the default settings and it found a trojan horse. I decided to go in and do the changes to do the “deep scan” just to be safe. Now i just have to find the site that is causing the trouble and block it so no one can visit it anymore. Thank you so very much for providing this solution!!


christine December 23, 2011 at 9:46 AM

I also ran Kaspersky’s TDSSKiller to find and remove rootkits after I successfully ran the deep version of the Kaspersky’s virus removal tool (which removed 2 trojans). I originally ran it first and it found nothing. When I ran it after the trojans were removed, it was able to detect the problem.


Lee January 3, 2012 at 11:19 PM

I’m trying to run setup_11.0.0.1245.x01_2012_01_03_20_33.exe. When I do, there are *no* choices of any sort offered. The location window choice is greyed out.


Lee January 3, 2012 at 11:21 PM

Forgot to add that I’m *not* in safe mode (does this make a difference?) since I can’t boot in safe mode.


Leave a Comment

{ 1 trackback }