W32.Kuang2+ W32.Trojan-gen{UPX!}

system · August 26, 2003, 1:40pm

Avast detected at me 2 viruses W32.Kuang2.
What is this the virus?

raman · August 26, 2003, 1:53pm

Let me guess. Avast reports the imscan.dll as infected? If so, it is a false alarm. You may use the boardsearch and search for kuang or Panda.

system · August 27, 2003, 1:05pm

…and Win32.Trojan-gen{UPX!}

raman · August 27, 2003, 1:09pm

Can you give us a filename and the folder where is it located?

system · August 27, 2003, 1:21pm

C:\Program Files.…\SystemVolume Inf…
D:.…\SystemVolume

system · August 27, 2003, 1:24pm

Every day Avast removes him and is every day!

raman · August 27, 2003, 1:35pm

The whole path and filename would be fine!
And what windows do you use.

BTW: You could check the file using this link: http://www.kaspersky.com/remoteviruschk.html

system · August 27, 2003, 2:03pm

C;\Documents and Settings\M… M…\Ustawienia lokalne\Temporary Internet Files\Content.IE5\WDEFOXQR\favs[1].eml=MIME part]=>MIME part]=>message body] is suspect with Exploit.Iframe.Vulnerability

What is this?

System Windows XP Home Edition SP 1

raman · August 27, 2003, 2:17pm

This means that one of your Emails or an Email you recieved maybe contains code that “forces” unpatched Outlook Versions to automatical execute attachements.

BTW: It is safe to delete all files and folders that are located in the"Content.IE5" folder, if Outlook and the Internetexplorer are closed.

BTW: can you find the filenames (given by Avast) in the registry?

system · August 27, 2003, 2:52pm

1/Trojans Win32.Trojan-gen{UPX!} it is already in the quarantine Avast!v.4 HE.
2/C:\Documents and Settings\M…M….…I cannot find the file name.
Avast alarms are all the time.
???

raman · August 27, 2003, 2:56pm

Okay, maybe we need a second opinion here. Use the Link to Bitdefender and/or Trend micro shown on this link: http://www.rokop-security.de/main/onlinescan.php
I just saw that the Bitdefenderlink is in german language. Try this: http://bitdefender.com/scan/licence.php

system · August 27, 2003, 3:47pm

OK.Thanks
BitDefender Scanner shows the error in the Polish option.

raman · August 27, 2003, 3:50pm

Please inform us what the other Av-Programm say or maybe find! Thanks

system · August 27, 2003, 4:20pm

Avast individually does not know to delete trojan Win32.Trojan-gen{UPX!}.
Does this by BitDefender Antivirus Free and places in the quarantine - Avast
Why?

PS:Norton Antivirus 2003 does not see this trojan >:(

system · August 27, 2003, 4:26pm

Hi,
please give us more details…
that means FULL pathnames, filenames and virusnames, found by the different scanners.
and explain your question a bit…
I’m not sure what you mean…

system · August 27, 2003, 4:35pm

Hi,
Scanning resident BitDefender AV Free 7 causes the reaktion Avast.
Avast individually does not remove trojan Win32…

raman · August 27, 2003, 5:52pm

Sorry to say that, because my english is far away from being perfect, but it is not very easy for me to understand exactly what you mean. Has Bitdefender found a virus and if so what virus was found? That is important to give you advice what to do, or what the Virus had done.

Does avast still find a Virus or does it report your system as clear?

system · August 27, 2003, 6:17pm

Bitdefender Free does not have a “resident scanner”, afaik
only Avast does
???

system · August 27, 2003, 8:13pm

Avast generates errors. >:(
The result of scanning other resident antivirus:
NOD32 II
McAfee VS 7 Pro
PC-Cillin 2003
AntiVir PE 6

"N0 viral code", “No trojan found”

system · August 27, 2003, 10:14pm

OK, the best thing to do is to send the suspected file either to support@asw.cz or directly to me: baudis@asw.cz

We will let you know about the result!

Pavel

W32.Kuang2+ W32.Trojan-gen{UPX!}

Announcements