Please help with this virus/worm!

Hi, My computer has been acting really weird lately, slow performance, does not open IE right away-one day it had 10 of them!!! (only clicked twice)
I ran avast and it came up with two win32:kuang2 problems, could this be false positives? and just yesterday found this one in junk mail(I do not recall opening any junk mail! never open them.)
VBS:small-AE.
They are in the vault as recommended. Should I remove? How do I remove them?
Thanks, Any help is appreciated.

Hi Lulu09,

You can leave them in there. They are like a prisoner in prison, cannot do much harm there.
If they are not necessary for the running of your computer leave them there in the chest for two weeks, then delete them into virtual oblivion until they are completely overwritten.

polonus

Let’s get a second opinion
could download and run Malware Bytes Anti Malware free and/or super anti spyware?

To know if a file is a false positive, please submit it to VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com. VirusTotal has a file size limit of 10Mb. Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

I’ve forgot, but, win32:kuang2 could be false detection due to Panda active scan: http://forum.avast.com/index.php?topic=12432.msg104932#msg104932
Read: http://www.avast.com/eng/virus_detection_and.html#idt_1554

Unfortunatelly, a well-known problem of Panda not encrypting its signatures :stuck_out_tongue:

Every virus can be identified, because it contains some unique signatures. Antiviral programs have their own database of that signatures. We call this database the "virus definition file". When an antiviral program scans a file for viruses, it compares all the signatures (of all viruses) in the database with the signatures in that file. If the signatures match (they are the same), the file is marked as infected. For an antivirus program, it is important to hide this database of signatures somehow - e.g. by encrypting it. Panda Antivirus does not encrypt its virus database - the signatures inside are clearly "visible" to other antiviral programs, so they detect this file as infected (but there is actually no virus inside - only the signatures are the same).

Panda removal tool: http://www.pandasoftware.com/resources/sop/UNINST_v1012.exe

How do you send/upload a file in the vault? Have no idea. ???
Tech,
What is Panda?

Run (start) avast antivirus.
Right click the interface and in the popup menu choose avast Chest.
Choose User files at left and right click the folder to add the files (using the context menu).

Panda on-line scanning: http://www.pandasecurity.com/homeusers/solutions/activescan/