Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
The registry editor is importing a reg file but I'm not running the registry editor. It is imporiting moo.reg and says "error importing moo.reg, you can only import registry files, and when I close it it run again and again.

I dont' think you've been hacked.
It's probably a virus or a program that's wanting to insert that regkey to run at boot.
Go here: http://housecall.antivirus.com
and run a free antivirus scan.Charger

You have a fairly new Worm & Backdoor called K0wbot on your PC. The virus part is in your windows system directory as explorer32.exe and is run each time u start your pc. As for the backdoor it gives remote access to your pc via IRC but thankfully the user on the other end cant do anything destructive.
Download some up to date virus scanner to remove it fully.
have nice day ;)

hi gian,
here's some info on the Worm K0wbot:this new virus is infecting the famous Kazaa network. The worm was previously named Backdoor.K0wbot.1.3.B because - besides using the popular file sharing KaZaA network to spread - it also includes an IRC remote control backdoor component.
"This backdoor is the second virus to successfully attack the popular network in less then two months" said Bogdan Dragu, Virus Researcher at BitDefender. "Following this trend, Peer-to-Peer file-swapping networks could soon become a paradise for any virus writer. Even more, starting with this version of a "classic" backdoor, we can talk about spying malware using largest web communities in order to spread in the wild" concluded Bogdan.The virus makes about 150 copies of itself in the KaZaA shared folder, using the names of appealing software/media files:
Once executed, the virus can take in control the victim computer and can perform the following actions:
- update the virus by downloading a newer version;
- report information about the infected system (CPU speed, memory, operating system version, uptime, Internet connection type, local IP address etc.);
- report installed software (by sending the file c:\moo.txt which lists the subfolders of the Program Files folder);
- perform different IRC commands, including flooding of other users of the chat server.you can get a K0wbot remover at:
www.webattack.com/get/kowbotremoval.shtml
you can get Regprot, a free registry monitor, and Procmon, a free process monitor at: www.thepublicworks.com security section. these 2 free programs will help you monitor your registry and start up processes.
all the best and cheers,
murve

![]() |
Trickler3103
|
virus protection
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |