• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

virus help needed

without going out on the web I ran quick scan 7 times. It said it resolved all threats and that I needed to restart each time.

ran it a 8th time and it found 11 threats (low )   and trojan.kotvarlgm2     it found all of these exactly each and every time, says it fixed them but they reappear, I have run the long version twice and the other norton utilities but they still show up.

need help

Mike

Replies

Kudos0

Re: virus help needed

Time to visit one of the free Malware Removal Forums recommended by the Community
http://www.bleepingcomputer.com/Am-I-infected-What-do-I-do/
http://forums.whatthetech.com/MalwareRemovalForum 
http://www.geekstogo.com/Security/MalwareRemoval
http://www.cybertechhelp.com/MalwareRemovalForum

Trained experts at free Malware Removal Forums do their best to clean / repair your system. Resist self fixes and using your computer as normal until your system is declared clean.  Register n' start a Thread at one Malware Removal Forum. 


What is Norton Virus Protection Promise?

Kudos0

Re: virus help needed

I have been running a Norton tool to remove Trojan.Kotver!bat.  It has run several times but Trojan.Kotver!bat remains.

The identified problem is in the directory “c:\users\alex\appdata\local\946c1”, which contains 3 files f94ae, b4a62.bat, and 196b7.65cac4 .  “alex” is my user name.   c:\users\alex\appdata\local\” appears to hold user specific data for various applications; although I have not confirmed or investigated that conclusion.

As I view the directory “c:\users\alex\appdata\local\946c1” via File Explorer, I see the file “b4a62.bat” disappear and then reappear on a consistent basis.  I assume that your tool is deleting the file & some other code is restring it.  That may be incorrect.  I deleted, one at a time, the files   “f94ae, b4a62.bat, and 196b7.65cac4” .   They were all restored a short time later.    I deleted the directory “c:\users\alex\appdata\local\946c1” and it was restored a short time later.    

It would appear that there is more code elsewhere that is keeping the Trojan alive by repopulating the above file.  Is there a way to identify that code.

My Norton version is supplied by Comcast.   I used Norton Power Eraser.

Kudos0

Re: virus help needed

Hello AlexKunkle

I would strongly recommend that you go to one of the free removal sites which bjm has recommended. This Trojan is very active and is changing constantly and it regenerates itself all the time. Br the time the Norton Tool is created, the Trojan has mutated a few times. Please do not try to fix this on your own as others have tried and are not too successful. There is another thread in the Forum although the name of it is slightly different perhaps.

The malware expert removers have all the tools to see what is in your computer without accessing your computer. They are the best ones to try and fix this. Good Luck

Please do come back and let us know how you made out.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: virus help needed

Hi @Mike scoutldr,

Sorry for the inconvenience caused, Could you please try the Fix tool from below Norton support article and let us know the status? Norton Support article:  Removing Trojan.Kotver from your computer Thanks.

Sunil_GA | Norton Forums Administrator | Symantec Corporation
Kudos0

Re: virus help needed

Hi @AlexKunkle,

I have sent you a private message requesting more details on this issue. Please check it when you get a chance. Thanks. 

Sunil_GA | Norton Forums Administrator | Symantec Corporation

This thread is closed from further comment. Please visit the forum to start a new thread.