Win32:Kuang2 in chest....now what?

Avast Free Antivirus / Premium Security
1

Newbie here.
On my first scan this virus was found in C:\WINDOWS\System32\ActiveScan. Avanti said to move it to the "Chest’ and here it sits.
What do I do now?
Gulp
Thanks for any and all help as I am new to

2

I didn’t finish the whole location entry.
Should read C:\Windows\system32\activescan\imscan.dll
Thanks!

3

It would appear that you are suffering from Panda’s on-line scan failing to encrypt its virus pattern file, and avast recognising the signature of win32:kuang2, a search of thes forums for win32:kuang2 will reveal this Panda issue.

I would suggest you don’t use Panda’s on-line scan but one of the others that don’t result in their virus pattern files being falsley recognised as a viurs.

On-line Virus Scanners and other useful Links Security.Ops.tk

4

Iraskindc,

Actually put it back. You more than likely have a “false postive” caused by the way Avast compares “suspect files” to the database. READ THIS, for a more in depth explanation.

Was the scan result that of Panda? Do you have Panda antivirus running on your computer?

A: This is a known problem. Let´s try to explain what´s going on:

Every virus can be identified, because it contains some unique signatures. Antiviral programs have their own database of that signatures. We call this database the “virus definition file”.
When an antiviral program scans a file for viruses, it compares all the signatures (of all viruses) in the database with the signatures in that file. If the signatures match (they are the same), the file is marked as infected. For an antivirus program, it is important to hide this database of signatures somehow - e.g. by encrypting it. Panda Antivirus does not encrypt its virus database - the signatures inside are clearly “visible” to other antiviral programs, so they detect this file as infected (but there is actually no virus inside - only the signatures are the same).

We can´t do anything about that, only recommend not to use two or more antiviral programs at the same time, or put that files to the list of exclusions, so they will not be scanned anymore.
Additional info:

Here is the list of Panda Antivirus files that avast! detects as infected:

* IMSCAN.DLL
* PAVDLL.DLL
* PAV.SIG
* APVXD.VX2
* APVXD.VXD

Here is the “virus that you detected in the mentioned. Avast “sees” the unencrypted database file” as an actual virus.

* Win32:Kuang2

You can restore the file to where it came from.

Take Care.

5

Thanks for your replies.
The thing is that I don’t use Panda…
What now?

6

Ok, perhaps you don’t have Panda installed but it is certainly an element of Panda Anti Virus (PAV) and someone at some time has run an on-line scan that uses the PAV on-line scanner.

http://www.avast.com/eng/virus_detection_and.html
http://bucarotechelp.com/computers/98011771.asp

There may be a means of uninstalling it, check add remove programs.

7

Thanks David.
So there is NO CHANCE that this is a virus?
The reason that I ask is that I had to uninstall Norton because it got corrupted by something.
No chance?
Thanks.
Lisa

8

No, it’s not a virus. 8)
You can submit the file to Jotti.

9

Dear Technical,

Thanks. I opened up the link to Jotti and I am sorry to say I don’t know how to send it to them for scanning as it is inside Avanti’s chest. How do I do that?
Thanks so so much.
Lisa

10

It’s my fault. You can’t scan a file that is into avast! Chest.
Chest is unreachable. It’s made to be unreachable and safe.
You can ‘extract’ the file to a floppy and scan there.
But, believe, these files are false positives, not really a virus.
You can let them into avast! Chest for more 30 days and wait until you feel safe to delete them. :wink:

11

Thanks Technical.
One question though…up above Techie said to put the file back.
But you say to delete it?
Which should I do. I’m not clear. Is it a necessary file that I should put back or should I delete it?
Thanks!
REALLY appreciate this.
Lisa

12

I think you can delete it if you do not intend to use Panda scanning anymore.
If you want to use it, you should add this file to avast exclusion list.

If you have doubt, it’s safer and easier to keep this file into avast! Chest to decide later 8)

13

Whew.
Thanks so much Technical for all your help!
Have an awesome day!
Lisa