|
|
Post by carlislemom on Jun 18, 2017 10:31:05 GMT -8
Hi! This problem keeps popping up when doing a full system scan. I have tried using the Norton Power eraser to no help. I noticed a problem with the Windows 10 64 bit laptop running slow. Windows defender kept finding malware and deleting the files. So I download the free copy of Norton that Comcast offers. My scans are attached. Hoping someone can help! I ran the Farbar recovery tool. The frst file I was able to attach to this post. Here is the Addition file link: wikisend.com/download/675544/Addition.txtFigured I would try here before doing a windows restore - hoping to avoid having to reinstalling all my program installs. Attachments:FRST.txt (108 KB)
|
|
dbrisen
Malware Removalists
Posts: 3,688 
|
Post by dbrisen on Jun 18, 2017 14:45:54 GMT -8
FIRST >>>>Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed): Free YouTube To MP3 Converter
QuickTime 7To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window. Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software. SECOND >>>>1- Please double-click on FRST/FRST64. 2- Press Ctrl+y (Ctrl and y keys at the same time) 3- A fixlist.txt file opens up in notepad.exe. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. 4- Press Ctrl+s to save. Close the fixlist.txt file. 5- Press Fix button. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. THIRD >>>>Please download Malwarebytes Anti-Rootkit from here- Unzip the contents to a folder in a convenient location.
- Open the folder where the contents were unzipped and run mbar.exe
- Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
- Click on the Cleanup button to remove any threats and reboot if prompted to do so.
- Wait while the system shuts down and the cleanup process is performed.
- Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
- When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt .
[/ul] LAST >>>>INFO TO REPLY WITH:How is your system running now? How did the uninstall(s) go? Any problems? The Fixlog.txt text file (you should be able to attach this file; no need for wikisend.com usually). The logs from MBAR - mbar-log.txt and the system-log.txt files please. Any questions?
|
|
|
|
Post by carlislemom on Jun 20, 2017 11:40:08 GMT -8
Thanks for the help. I waited until I had the house to myself so I would not be distracted to complete the tasks. I just finished doing all the steps above. So far it the laptop is responding faster, especially on startup. The malwarebytes program did not find anything on the system! The requested files are attached below. I am now going to run a Norton Full system scan. I will post the results. |
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 20, 2017 11:55:36 GMT -8
I am definitely awaiting whatever Norton finds now. Please let me know.
|
|
|
|
Post by carlislemom on Jun 20, 2017 14:43:28 GMT -8
Full scan just ended. Kotver!bat still there, nuts!!! Should I re-run frst64?
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 20, 2017 19:12:41 GMT -8
Yes, please rerun FRST64 (Scan mode only) and attach the FRST.txt file. Thanks.
|
|
|
|
Post by carlislemom on Jun 21, 2017 9:59:22 GMT -8
Here is the requested file. I am hoping you can find something...am at a lost at what do next. Attachments:FRST.txt (102.38 KB)
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 21, 2017 12:03:00 GMT -8
Your system did have the infection (Kotver) but it is now gone (removed). Norton is "stuck" on the detection of Kotver due to part of the infection being hidden via RootKit type tricks. Even though Norton and my script have removed all of Kotver, Norton's remediation routines still think they have not done anything yet. The best way to fix this issue is to uninstall and re-install Norton. Since this is a Comcast provided product, I am providing a link to Norton / Symantec knowledge base article that handles this: Remove and Reinstall the Comcast Security Suite |
|
|
|
Post by carlislemom on Jun 21, 2017 17:38:13 GMT -8
Wanted to get you an update. I read the link you sent but was not sure their program would really delete everything so I used Windows Add/Remove prgram first. I tried removing Norton, rebooted, reinstalling Norton, updating, authorized etc. The full system scan still found the virus.
I then downloaded the remove program from them. Ran, rebooted and re-installed. It remembered my login- so I do not trust that it deleted all the files. I am running a full system scan right now.
It is getting late here in PA. The scan will most likely run until late tonight. Will most likely post the results when I get up in the morning.
|
|
|
|
Post by carlislemom on Jun 22, 2017 5:14:41 GMT -8
Norton is still saying I have the Kotver!bat virus. I also ran Malwarebytes - this gives clean results. I am going to try uninstalling Norton again - making sure all folders are deleted including deleting the delete program before re-downloading and will re the scan again.
|
|
