944,010 Members | Top Members by Rank

Ad:
Jan 28th, 2005
0

Kuang2 The Virus (hackerwatch.org)

Expand Post »
Hellow, I have just got ahold of mcafee after being without a virus scanner/firewall after my norton messed up and wouldnt let me uninstall and I couldnt have both because of a conflict untill I found out the problem and got rid of norton compleetly. Well I did a virus scan and 2 trojans came up mcafee got rid of them. Then I opened up the firewall and saw "Test my firewall" and it took me to HackerWatch.com I looked at the "Top port activity" thing and

http://img137.exs.cx/img137/219/untitled1gd.jpg

does this mean I got the virus or something?

Thanks ALOT in advance
Similar Threads
Reputation Points: 10
Solved Threads: 0
Newbie Poster
joshuadt is offline Offline
1 posts
since Jan 2005
Jan 29th, 2005
0

Re: Kuang2 The Virus (hackerwatch.org)

I think that's just a general anouncement from that web site saying that the most common problem is the ICMP port and Kuang2 the virus. If you have the latest versio of McAfee and the latest DAT files, you should be all right. If you want to make sure you don't have any viruses follow these steps:

Reboot in safe mode by pressing F8 when the computer is restarting.

step1: run adaware SE in my signature

step2: click start--run--type "regedit"--and check the run folders at the end of these paths for suspicious looking keys (like somethine with kuang2 in the name,etc.) if your not sure about a key type it in google to find out what it is. (don't delete anything you're not sure of)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce

step3: open the c:\documents and settings\(user name)\local settings(if you cant see this folder then click tools-folder options-view tab-check show hidden files [tools is at the top with "file", "edit", etc.])\temp <--clear out this folder and also the temp internet folder.

step4: open c:\program files\windows\system32 and select the view as "details" so you can see the date they were modified. Arrange them by date and look at the more recent ones for any signs of kuang2 or anything that looks like a virus or a suspicious .dll, like I said earlier if your not sure what it is type it in google.

step5: make sure you got all the windows updates, you have a up to date virus scanner, and I suggest a firewall like ZoneAlarm (pay attention you only need the free firewall) (but I think you said you already have a firewall anyway) [http://www.zonelabs.com/store/conten...zap_trial.jsp]
Reputation Points: 26
Solved Threads: 6
Junior Poster
steosaur(oWn) is offline Offline
165 posts
since Oct 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: I need advice with my HijackThis log
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: Constantly losing control of my browser





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC