The Trojan.Kotver!bal and (!gm2) Heuristic virus

Not sure if you got your computer sorted or not but I'm going to share what I did and I believe it's cleared.

:)

Here's my journey log:

Ok, .so I discovered this version (Trojan.Kotver!bat) of the virus on my laptop on Tuesday. This virus is Heuristic in nature meaning it learns how to evade detection and it morphs. By Thursday morning it became this version (TrijanKotver!gm2) of the virus. I am NOT by any measure an expert on this but this is what I did once I realized it came in on the fake Mozilla patch. Get comfortable this is going to take time to deal with. It's a bi&$%#$ to deal with.

1) Uninstall Mozilla (you can put it back later) The virus hijacks your homepage too so every time you click on it, it is re-routing you to a bad site that seems to be re-infecting you so don't.

2) Check your download page. It will show all the recent stuff trying to get into your computer. (FYI:Anything coming in since you noticed infection is suspect) If you see the Mozilla patch file, delete it but this doesn't mean it's gone.

3) Download the FREE version of Ad Aware by Lavasoft. Google it. Once downloaded and activated run a full system scan (It will take 7 hours. Sorry. It's necessary.).

4) While scan running go to your Norton and click on it. Once open the screen should say 'Your protected' (riigghhhtttt). Click on 'More Norton' and then click on 'History.' It will show all of the intrusions that Norton is finding. This is one of the best locations to monitor if the little shit virus is gone or still lurking.

5) Once Ad Aware scan finishes and cleans it, then run a Norton quick scan and see what pops up. Continue to monitor the Security files on Norton to watch for the virus.

6) After running scan be sure to click on the 'optimize disk' button in Norton. It should prompt itself but make sure you do this. When I optimized mine it cleared out more than 8,000 files of crap.

7) Norton has made available FixToolKotver64.exe (there is also a version for 32 byte operating systems too. If your not sure which one you have go to start button on computer and control panel and click system. A window should pop up with what you are). Run the tool and it will search for evidence of the virus. Follow the instructions given (support.norton.com) .

8) Drink beer or wine and lots of it cause this is a pain in the ass. Sorry. ;)

9) Continue to monitor Norton History even after this is cleared.

Good Luck. We feel your pain.

Veronica