Computing.Net > Forums > Security and Virus > I think im haCkEd!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

I think im haCkEd!!!

Reply to Message Icon

Name: Gian
Date: July 16, 2002 at 19:36:02 Pacific
Comment:

The registry editor is importing a reg file but I'm not running the registry editor. It is imporiting moo.reg and says "error importing moo.reg, you can only import registry files, and when I close it it run again and again.



Sponsored Link
Ads by Google

Response Number 1
Name: Charger
Date: July 16, 2002 at 19:42:24 Pacific
Reply:

I dont' think you've been hacked.
It's probably a virus or a program that's wanting to insert that regkey to run at boot.
Go here: http://housecall.antivirus.com
and run a free antivirus scan.

Charger


0

Response Number 2
Name: georges
Date: July 16, 2002 at 21:37:55 Pacific
Reply:

Also run Ad-aware
http://www.webattack.com/get/adaware.shtml


0

Response Number 3
Name: m0ng
Date: July 17, 2002 at 04:06:08 Pacific
Reply:

You have a fairly new Worm & Backdoor called K0wbot on your PC. The virus part is in your windows system directory as explorer32.exe and is run each time u start your pc. As for the backdoor it gives remote access to your pc via IRC but thankfully the user on the other end cant do anything destructive.

Download some up to date virus scanner to remove it fully.

have nice day ;)


0

Response Number 4
Name: toc vang hoe
Date: July 17, 2002 at 07:38:11 Pacific
Reply:

I d'nt think so


0

Response Number 5
Name: murve
Date: July 17, 2002 at 09:06:36 Pacific
Reply:

hi gian,
here's some info on the Worm K0wbot:

this new virus is infecting the famous Kazaa network. The worm was previously named Backdoor.K0wbot.1.3.B because - besides using the popular file sharing KaZaA network to spread - it also includes an IRC remote control backdoor component.
"This backdoor is the second virus to successfully attack the popular network in less then two months" said Bogdan Dragu, Virus Researcher at BitDefender. "Following this trend, Peer-to-Peer file-swapping networks could soon become a paradise for any virus writer. Even more, starting with this version of a "classic" backdoor, we can talk about spying malware using largest web communities in order to spread in the wild" concluded Bogdan.

The virus makes about 150 copies of itself in the KaZaA shared folder, using the names of appealing software/media files:

Once executed, the virus can take in control the victim computer and can perform the following actions:
- update the virus by downloading a newer version;
- report information about the infected system (CPU speed, memory, operating system version, uptime, Internet connection type, local IP address etc.);
- report installed software (by sending the file c:\moo.txt which lists the subfolders of the Program Files folder);
- perform different IRC commands, including flooding of other users of the chat server.

you can get a K0wbot remover at:
www.webattack.com/get/kowbotremoval.shtml
you can get Regprot, a free registry monitor, and Procmon, a free process monitor at: www.thepublicworks.com security section. these 2 free programs will help you monitor your registry and start up processes.
all the best and cheers,
murve


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon

Trickler3103 virus protection



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: I think im haCkEd!!!

HELP! I think my neighbor is hack www.computing.net/answers/security/help-i-think-my-neighbor-is-hack/2237.html

aim myspace virus(i think its gone) www.computing.net/answers/security/aim-myspace-virusi-think-its-gone/20590.html

I think I have a Virus www.computing.net/answers/security/i-think-i-have-a-virus/4354.html