Win32:kuang2 virus detected

[Donn]

Avast found Win32:kuang2

in c:\windows\system\active scan\imscan.dll

VPS version 0433-1, 08/09/04

I searched symantec, AVAST, SOPHOS, and google and cannot find a how-to to get rid of it. When I pushed the 'repair all' icon the record said it was repaired, but it said two other files are infected with "Win95..." and that an error ocurred during the rpair process, twice. I'm currently re-running AVAST. It never informed me of the presence of "Win95..." whatever it really is.

All ideas welcome...



Edit: error

2nd edit: 2nd virus is Win95:Matyas. I don't get it. I'm running updated Spybot, Adaware, AVAST, SpywareBlaster, MRU Blaster, Sygate Firewall, Script Sentry, and STILL this stuff gets in....

[PrntRhd]

Oooooooh, that one is nasty:
http://www.pestpatrol.com/pestinfo%5Ck%5Ckuang_2.asp

And you know how much I love PP.
:p

[Donn]

Thanks PrntRhd, I have the files moved to the vault, and got the system restore disabled/re-enabled after soemthing showed up in the SR files. Then I ran AVAST in safe mode and it came through clean.

I have to go in for jury duty tomorrow. So everything is on hold until that passes.

Thanks again, I checked with the hyperlink for PP's 'unregistering" procedure, something I've never done, but I got an error 404, page no longer...from it. Perhaps in a few days when I get time you can tell about how to do some of that stuff. Meanwhile I still haven't gotten those registry files straight from the other thread, so I cannot set a restore point. I am really disappointed that AVAST didn't respond. See you all on the other side of jury duty.

[PrntRhd]

2nd edit: 2nd virus is Win95:Matyas
I did google search and some sites say this is false positive of Panda files.

[Donn]

Ah, sprung from jury duty...yeah, i saw that, but I don't have those files, I only have AVAST, so I don't see how it could be reading some other AV's files and mistaking the signature list for the actual bug. Nonetheless, I have vaulted the buggers, and disabled/re-enabled system restore, and run AVAST in safe mode--clean.

As soon as I get my registry back in order I am going to dump AVAST and stick with AVG free.

[Fruss Tray Ted]

Why are you still hanging onto that crud with the vault?

Their not prisoners, you owe them no respect. 'Execute' them immediately! (enter pc bashing .gif here)

Speakin of Jury Duty, did you stay for the hangin'? :eek:

[Donn]

I don't trust AVAST anymore, Frus. I'm going to drop it as soon as I get the reg problem straight, and I can access my e-mail from home again. I am waiting for a response from Windoze now about why I have "default engine" along with "default" and "thread" when their paper on this problem doesn't mention "default engine."

I also looked for a small outside HD, couldn't find anything less than 20 GB for less tham @ $75. Considering I haven't used half of my 40 GB hd in the box, I don't think I'll need anything that big, but I'm still looking. I shall be dumping the vault later today--we're getting hurricained so I have a four day weekend. The rain doesn't bother me, I've painted in the rain...but there's something about aluminum ladders and lightning that's not cool at all.

Didn't stay for the hanging, didn't even stay for lunch, they dismissed us at noon. We have a "one trial or one day" service rule in Maryland. So since there was no call for jury trials yesterday, we were let go. Recall in 3 years.

Edit: Man, if the jury selection system doesn't substantiate "everyone is someone else's weirdo", then I don't know what does....

[Fruss Tray Ted]

What's so taboo about that?! Can't/won't order online? Grow up.

I buy from these guys (http://www.computersurplusoutlet.com/showproduct.asp?c=15&s=61) A-Plenty...