I got a virus called W32.Kwbot.C.Worm from Kazaa yesterday. I never "executed" the virus (e.g. clicked on it or even restarted my pc) so did the virus even run? I ask because, I rebooted into safe mode, then ran a scan with Norton AV. Found the file - quarentied it - deleted it. Then when i went to go into the reg editor to take out the malicious entries that Norton instructed me too, there was none. So did the virus even infect my system, or did i just get it, but it didn't infect me cuz i did what i was supposed to do quickly? Please let me know - driving me crazy! Thanks, Brian

Sounds like you stopped it dead in its tracks. You could do a second virus scan at HOUSE CALL at the Trend Micro website if that would ease your mind. Brian, if you are going to use KAZAA, remember to be very cautious and scan evrything. As many people that try to help people at this security area know full well, there are virus/trojans/worms that are only available by using KAZAA!

thanks for your advice capt I am as careful as i can be on the catastrophe that is kazaa. And at least i know my av is working huh? lol. Thanks again for your time. Brian

hi brian, here's some info on how to manually delete the w32 kwbot c worm: Click Start > Run > type regedit and click OK Click the + next to the following keys HKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion Scroll down and click on the Run folder. In the right hand window look for: Windows Explorer Update Build 1142 = Explorer32.exe Right click on this entry and click delete. Scroll down and click on the RunServices folder. In the right hand window look for: Windows Explorer Update Build 1142 = Explorer32.exe Right click on this entry and click delete. Collapse the registry tree, close regedit and reboot. Do a find files for EXPLORER32.exe and delete it. for more info on this worm and other trojans, go to www.thepublicworks.com security section and link to simovits consulting, darkE, tomcat etc. and yes follow the capt.'s good advice and stop using Kazaa and any other peer to peer programs! hope this helps, murve