|
Post by meryle on Apr 4, 2017 17:52:52 GMT -8
Full system scan using Norton has detected a virus. It has not completed yet, so will have to provide more info tomorrow.
|
|
|
Post by meryle on Apr 4, 2017 18:18:42 GMT -8
Detected same virus: Trojan.Kotver!gm2 It said it is fully resolved but it has said that before. It did not make me reboot this time.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Apr 4, 2017 19:39:03 GMT -8
There is a possibility that Norton's detection of Kotver is "stuck"; I have discussed this with Norton already. Before we proceed with a fix for the "stuck" detection, let's make sure the infection is gone. Read Slowly and all of it.If you still have a Addition.txt log file on your desktop, please delete it now. Start FRST64 that is on your Desktop by double clicking and allowing the software to run when the User Access Control asks (if it does). The tool will start to run. When the tool opens click Yes to disclaimer. (if it does) Select Additional.txt in the Optional Scans section of FRST64. Press Scan button. It will make two logs ( FRST.txt and addition.txt) on your Desktop. Please attach the logs in your reply back. Or open the logs in notepad and copy the logs and paste back in a message as a reply. ( Ask if you don't know how to do either of these). Notes:
If your Security software blocks the running or download of FRST / FRST64, please disable the security software or make an exception for this file. FRST is updated very frequently and is safe to run but because of the frequent changes (to keep up with newest malware techniques) most Security Software does not approve of the unknown file. Right now the forum will not allow one to attach the Addition.txt file so please use wikisend.com or pastebin.com to upload the file and then post the download link here in your reply post.
|
|
|
Post by meryle on Apr 5, 2017 14:05:00 GMT -8
|
|
|
Post by meryle on Apr 5, 2017 14:08:44 GMT -8
It will not let me upload the addition file. I tried copy and paste but then this website gives me a message that says I am not allowed to post here. I will keep trying.
|
|
|
Post by meryle on Apr 5, 2017 14:16:54 GMT -8
This is the message I received when I tried to upload from wikisend. I did not get this the first time I used it.
Sorry, you have been blocked You are unable to access freeforums.net Why have I been blocked?
This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. What can I do to resolve this?
You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.
Cloudflare Ray ID: 34afdb6e05635576 • Your IP: 76.181.14.162 • Performance & security by Cloudflare
|
|
|
Post by meryle on Apr 5, 2017 14:36:58 GMT -8
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Apr 5, 2017 21:47:19 GMT -8
Please run the Removal and Reinstall tool from here. This will fix the "stuck" detection. Let me know how this works for you, please.
|
|
|
Post by meryle on Apr 6, 2017 14:37:38 GMT -8
I have completed the removal and install. I am now running a full system scan and will let you know what it reports when complete. Thank you for your help.
|
|
|
Post by meryle on Apr 6, 2017 16:44:42 GMT -8
Norton came back clean on the last system scan. Yeah!!! Thank you so much!
|
|