{"id":49265,"date":"2016-09-29T05:18:43","date_gmt":"2016-09-29T05:18:43","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=49265"},"modified":"2016-10-14T04:17:20","modified_gmt":"2016-10-14T04:17:20","slug":"remove-kovter-trojan","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/remove-kovter-trojan\/","title":{"rendered":"How to remove Trojan Kotver malware (Virus Removal Guide)"},"content":{"rendered":"

Kovter<\/strong> is a trojan horse that is used to perform click-fraud operations<\/strong> on the computers it infected, in order to generate revenue for its authors. When the new Kovter variant comprises a computer, the Trojan has the ability to reside only in the registry and not maintain a presence on disk. It accomplishes this by using registry tricks in an attempt to evade detection. The threat is also memory resident and uses the registry as a persistence mechanism to ensure it is loaded into memory when the infected computer starts up.
\n\"Trojan
\nThe Kovter malware family has been around since at least 2013 and has evolved over time. The threat rose to prominence in 2013 and 2014 thanks to its association with traditional ransomware (Trojan.Ransomlock.AK) which locks a victim\u2019s computer screen and displays a message demanding a fine for illegal activity. However, Kovter itself is known to perform click-fraud activities.<\/p>