Remove Kotver malware variants from your computer

This article provides information on removing the Trojan.Kotver, threat from your computer.

Manual removal of the threat

1. Press the Windows + R keys to open the Run dialog box.

2. Type in the following text, and then press Enter.

    

   cmd

3. Type the following to kill the process tree of explorer.exe.

   •  

     taskkill /im explorer.exe /f

   •  

     taskkill /im regsvr32.exe /f

4. Press the Ctrl + Alt + Delete keys.

5. Click Start Task Manager.

6. In the Windows Task Manager window, click File and then click New Task (Run...).

7. In the Create New Task window, type

   explorer.exe

   , and click OK.

8. Navigate to the following locations, and delete the Kotver files.

   • C:\Users\xxxxxxxx\Appdata\Local\(alphanumeric folder name)

   • C:\Users\xxxxxxxx\Appdata\Roaming\(alphanumeric folder name)

   • C:\Users\xxxxxxxx\Appdata\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\(alphanumeric name.lnk)

9. Restart the computer.

10. Open your Norton device security product.

11. In the Norton product main window, click Security, and then click Scans.

12. In the Scans window, select Full System Scan and click Go.

13. When the scan is finished, click Finish.