Trojan.Kotver!gm2

How can I remove this virus Trojan.Kotver!gm2 ? It keeps coming back after I run virus scan and remove it. I am running Windows 10.

@F...

If I may ask, did you see anything like "update xxx software" like this reported elaebucketexplorer . net? If so, please tell us the name of the site (if you could remember that).

TIA

have you tried > FixToolKotver >
https://support.norton.com/sp/en/us/home/current/solutions/v119650544

have you tried > Chat with Official Norton Support  > ask for VPP team >
What is Norton Virus Protection Promise

Post back progress.

Dave Z

Each infection of this type is an individual case. The infection leaves things in places that the Norton scans normally would not look, and these need to be manually removed. This is best done under the supervision of a malware removal expert.

So my advice is the same as in my post above yours. Go to one of those free malware removal sites and have your system cleaned properly.

 

I have the same problem. I'm using Windows 7. I even tried powering down completely, unplugging the computer and waiting 5 minutes. Still had the same problem.

What operating system are you using? I ask because you may not be getting a complete restart of your system. If you use Windows 8/8.1 or 10, there can be an issue with the Fast Start feature.. See more information here.

If this is not the issue, I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
http://qmalwareremoval.freeforums.net/

What operating system are you using? If you use Windows 8/8.1 or 10, there can be an issue with the Fast Start feature.. See more information here.

If this is not the issue, I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
http://qmalwareremoval.freeforums.net/

madmot:

Thank you I didn't know this was an option. They need to post it better. All fixed... So why do they let other people work this forum?

I'm glad the issue is fixed for you. I would think that the expert you dealt with worked with you one on one and (correct me if I'm wrong) remote accessed into your system and manually did what a removalist would have done by having you run custom made scripts. Anyway, as I said, glad it was fixed and now you know that you have options for help both from Norton and some other trained places.

madmot:

... So why do they let other people work this forum?

If you are referring to the people responding here...This is a user to user forum, with help from Norton when needed. We are just users like you who volunteer our time to try to help other users from our experience with the Norton products.

 

Hello

A lot of customers don't want strangers accessing their computers. The free malware removal sites help you to clean up your computer by telling you what tools to use and they also create special scripts to clean up the infections. They also have sections where they will  tell you if your computer is infected. No one virus program can find all the malware that is out there. These malware removalists from the listed sites work with you 1 on 1 and tell you what scans to run to diagnose and cure the infection if there is one.. Some infections require the replacement of files also.

Thanks.

Thank you I didn't know this was an option. They need to post it better. All fixed... So why do they let other people work this forum?

madmot:

Nice....  I pay Norton subscriptions for 15 years and get referred to an outside vendor when I actually have a problem.

And if you read  dbrisendine's post above yours, it is explained that all AV products are vulnerable to this kind of infection. 

 

madmot: Nice....  I pay Norton subscriptions for 15 years and get referred to an outside vendor when I actually have a problem.

What is Norton Virus Protection Promise
 

Nice....  I pay Norton subscriptions for 15 years and get referred to an outside vendor when I actually have a problem.

madmot:  Anybody have a good way of getting rid of this?

You should sign up for help from one of these free malware removal sites where an expert can help you on a one to one basis:

http://www.bleepingcomputer.com/forums/

http://www.geekstogo.com/forum/

http://www.cybertechhelp.com/forums/

http://forums.whatthetech.com

http://qmalwareremoval.freeforums.net  - (The malware removalist is the Norton Guru dbrisendine, who posted just above). 

Please read and follow their guidelines in order to get the most efficient assistance.

Let us know if the above helped.  

Thanks.

 

Ok my Trojan Kotver!gm2 infection as well as my fiance's came at the same time we both upgraded our data plans on Verizon to the roll over data. Since then I've gone thru 60G in about 30 days where before I was barely using 15 for the the month.

I've run spybot a dozen times, booted in safe mode and ran scans where it takes out 100+ threats each time. I can't seem to get my computer to boot from a USB drive to scan prior to booting. Changed the boot order in Bios several times and it won't do it.

Anybody have a good way of getting rid of this?

Running windows 10

All AV software is vulnerable to this type of malware as it comes in as a harmless attachment to email or spam that a user manually launches.  The good news is that there is a limit as to how much code and damage this type of malware can do and deliver; this is limited by the natural of the "fileless" storage of the malicious code inside the registry.  The problem with a traditional removal / remediation software is that (at least in the 20 or so cases I have done directly) the registry names are different, the code is different and the resulting actions the code would activate were different in each case.  A 'static' software would have to have an extreme level of AI to spot and handle each of these every time.

A trained removalist can spot these differences and, after the proper research on them, use different techniques to remove the 'bad code'.  The scanners a malware fighter uses are no better or worse than a AntiVirus.  They both have their purposes in the malware fight.  It is the mind of the fighter that makes the difference between the two tools.

 

Hello @dbrisendine

 

Can you please tell these customers why Norton programs can't remove this malware completely. They are ready to uninstall Norton and try some other security program.  Thanks.

That's a great question, I am about to uninstall Norton and try some of the other products to compare results.

Perhaps an impertinent question, but, if other sites/services are recommended to address this, why can't the Norton software itself remove this problem instead of just quarantining files over and over and messaging me to restart all the time?