| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
w32.weird
|
Original Message
|
Name: John
Date: September 22, 2002 at 12:06:24 Pacific
Subject: w32.weirdOS: win98CPU/Ram: ath 800 256ram |
Comment: Hello, My PC is infected with the w32.weird worm en has attached most of my exe files. Norton gives a solution on their site but it doesn't works on my PC. Does someone have an idea how to get rid of it? Thanx
Report Offensive Message For Removal
|
|
Response Number 3
|
Name: murve
Date: September 22, 2002 at 12:43:16 Pacific
|
Reply: (edit)hi john, w32.weird is an alias of the Kuang trojan. here's some info: look for these files: Kuang2v.exe - 55,993 bytes Wininit.ini - Wininit.bak - Explorer.e- 10,240 bytes - 11,264 bytes its a remote Access / trojan dropper where Explorer.exe is replaced by Explorer.e when the computer is restarted and also allows remote access to the infected computer. for more info go to www.thepublicworks.com security section and link to simovits consulting> trojans by name. also go to wilders.org and download a free 30 day trial of Trojan Hunter and scan completely. then do a trojan and port scan at pcflank to make sure you are clean. hope this helps, murve
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Joel R
Date: September 26, 2002 at 09:09:02 Pacific
|
Reply: (edit)According to Norton Anti-Virus, W32.Weird has infected 3 .exe files on my system. Fortunately, none are critical. I have them quarantined. Symantec's fix does not work for me either. I cannot locate any of the files mentioned neither in their W32.Weird fix nor in murve's Kuang trojan post. I find this puzzling and a little unsettling. Thanks for your help!
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home