A first time user of avast!, i panicked when told a virus by the name of win32:kuang2 was living in my pc the only thing i could see was “move to chest” so i quickly clicked on the option which led to the move and rename options box, so i moved and renamed the file expecting it to be in the virus chest to find that once the scanning was finished it wasnt there. so now i have a virus somewhere in my computer which i stupidly moved and have no idea how to find it! ???
Hello!
Try viewing the warning log located at,
C:\Program Files\Alwil Software\Avast4\DATA\log
and open the
warning.log.txt
If you moved it to chest then it’s ok. avast! Chest is a second name for file quarantine 
OK i rescanned and found the file again, this time i put it in the chest - without panicking ;D . Now what do i do? it sounds like the false positive thing because i found it originally in panda active scan : imscan.dll containing the win32:kuang virus.
I’m hoping it isn’t dangerous, the only reason i got an antivirus is because yesterday i started getting this warning page from google when trying to search saying that i have a virus and thats what makes me unsure whether it is a real virus or not.
Submit the file to Jotti and let us know the results, i.e., if it is or not a false positive.
Does the virus is cleaned and come back? I mean, can’t you get rid of the virus?
Went on jotti and results were all clear, nothing found. Does that mean it was a false positive?
Sure… Don’t worry.
Let the file on Chest or delete it.
Did you try to submit it to Jotti from the chest? if so Jotti will be unable to scan it as the chest is protected.
If it was outside the chest when you submitted it I would have thought that avast would at least have found it again as it had before (unless a recent VPS update resolved a false positive).
yeah i submitted it from the chest, should i move it out and then scan it again from outside the chest on jotti? or would that be risky, i don’t want to spread the virus :-\
Try to use Virus Cleaner 
Move it out to a temporary folder, scan it again and see if a recent VPS update has resolved the issue, if so your work is done.
Otherwise, establish a connection with the Jotti site, pause web shield and standard shield (so you don’t get alarms), uploaded the file for checking, resume the web and standard shield providers and check the results and let us know.
Just going over the complete thread again, you never said what the file name of the infected file was nor where it was found, example (C:\windows\system32\infected-filename.xxx)?
More surprising no one asked.
Actually it was said it was found in c:\program files\panda software\panda titanium antivirus 2004\pavd. dll . It says it’s a Win32:Kuang2 and it’s a Virus/Worm. The reason I know is because I just had the same problem. I found this one plus 3 others in my system files. The 3 others I was able to get rid of, but this one it won’t let me repair, move, delete or rename. It says the access is denied. I have had nothing but trouble with Panda (someone who was fixing my computer put it on). I have tried to delete it to no avail. Now it’s full of viruses and I’m finding out I’m not the only one with the same problem! Any help would be greatly appreciated with how to a) get rid of this stupid worm, and b) get rid of Panda!!!
Thanks in advance!!
These are false detections due to Panda active scan: http://forum.avast.com/index.php?topic=12432.msg104932#msg104932
IMSCAN.DLL
PAVDLL.DLL
PAV.SIG
APVXD.VX2
APVXD.VXD
I think this is related to false detections due to Panda active scan: http://forum.avast.com/index.php?topic=12432.msg104932#msg104932
Unfortunatelly, a well-known problem of Panda not encrypting its signatures 
ty! I actually looked last night and found the same info on the site…now my only problem is that I can’t get rid of the stupid program! I don’t want Panda on my computer but it refuses to let me uninstall it, zdelete it, do anything with it!!! Any suggestions?
I don't want Panda on my computer but it refuses to let me uninstall it, zdelete it, do anything with it!!! Any suggestions?What errors/messages are you getting when you try to get rid of it?
Assumes you are using win XP, which you haven’t said?
In the meantime use, Start, Run, type msconfig and ensure that there are no entries in the Startup Tab for Panda entries.
Also check the Start, Control Panel, Administrative Tools, Services and if there are any Panda services, stop them and disable the service.