Other products

Remove Kotver malware variants from your computer

This article provides information on removing the Trojan.Kotver, threat from your computer.

Manual removal of the threat

  1. Press the Windows + R keys to open the Run dialog box.

  2. Type in the following text, and then press Enter.

    cmd

  3. Type the following to kill the process tree of explorer.exe.

    • taskkill /im explorer.exe /f

    • taskkill /im regsvr32.exe /f

  4. Press the Ctrl + Alt + Delete keys.

  5. Click Start Task Manager.

  6. In the Windows Task Manager window, click File and then click New Task (Run...).

  7. In the Create New Task window, type explorer.exe, and click OK.

  8. Navigate to the following locations, and delete the Kotver files.

    • C:\Users\xxxxxxxx\Appdata\Local\(alphanumeric folder name)

    • C:\Users\xxxxxxxx\Appdata\Roaming\(alphanumeric folder name)

    • C:\Users\xxxxxxxx\Appdata\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\(alphanumeric name.lnk)

  9. Restart the computer.

  10. Start Norton.

  11. In the main window, click Security, and then click Scans.

  12. In the Scans window, select Full System Scan and click Go.

  13. When the scan is finished, click Finish.

The solution made it easy for me to handle my issue.

Yes No

Help us improve this solution.

Thank you for helping to improve this experience.

What would you like to do now?

Browse for solutions, search the Norton Community, or Contact Us.

DOCID: v119650544
Operating System: Windows
Last modified: 04/30/2020