We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/Kovter.B
Aliases: RDN/Suspicious.bfr!v (McAfee)
Summary
Trojan:Win32/Kovter.B is a trojan that can prevent you from accessing your desktop. It might also automatically open a website containing adult content. It can receive commands to a hacker, and send information to the hacker about your PC.
You can read more about this threat on the Microsoft Malware Protection Center (MMPC) blog:
The following free Microsoft software detects and removes this threat:
- Microsoft Security Essentials or, for Windows 8, Windows Defender
- Microsoft Safety Scanner
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.
Enable the registry editor
This threat might prevent Registry Editor from running. To allow the Registry Editor to run, follow these steps:
- Click Start then Run and type cmd to run a command prompt.
- In the command prompt, type the following and press Enter:
reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f - Type exit.
Additional remediation instructions for this threat
This threat might make lasting changes to your PC's settings that won't be restored when it's cleaned. The following steps can help change these settings back to what you want:
- Enable Task Manager:
- For Windows Vista
- For Windows XP
- For other support and help related articles, go to:
- Microsoft Security TechNet Center
