Computing.Net > Forums > Security and Virus > w32.weird

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

w32.weird

Reply to Message Icon

Original Message
Name: John
Date: September 22, 2002 at 12:06:24 Pacific
Subject: w32.weird
OS: win98
CPU/Ram: ath 800 256ram
Comment:

Hello,
My PC is infected with the w32.weird worm en has attached most of my exe files. Norton gives a solution on their site but it doesn't works on my PC. Does someone have an idea how to get rid of it?
Thanx


Report Offensive Message For Removal


Response Number 1
Name: Norm
Date: September 22, 2002 at 12:29:28 Pacific
Reply: (edit)

Click here for
removal tool.

Good luck


Report Offensive Follow Up For Removal

Response Number 2
Name: Norm
Date: September 22, 2002 at 12:34:49 Pacific
Reply: (edit)

Report Offensive Follow Up For Removal

Response Number 3
Name: murve
Date: September 22, 2002 at 12:43:16 Pacific
Reply: (edit)

hi john,
w32.weird is an alias of the Kuang trojan.
here's some info:
look for these files:
Kuang2v.exe - 55,993 bytes Wininit.ini - Wininit.bak - Explorer.e- 10,240 bytes - 11,264 bytes
its a remote Access / trojan dropper where
Explorer.exe is replaced by Explorer.e when the computer is restarted and also allows remote access to the infected computer.
for more info go to www.thepublicworks.com security section and link to simovits consulting> trojans by name.
also go to wilders.org and download a free 30 day trial of Trojan Hunter and scan completely.
then do a trojan and port scan at pcflank to make sure you are clean.
hope this helps,
murve


Report Offensive Follow Up For Removal

Response Number 4
Name: Joel R
Date: September 26, 2002 at 09:09:02 Pacific
Reply: (edit)

According to Norton Anti-Virus, W32.Weird has infected 3 .exe files on my system. Fortunately, none are critical. I have them quarantined.

Symantec's fix does not work for me either. I cannot locate any of the files mentioned neither in their W32.Weird fix nor in murve's Kuang trojan post.

I find this puzzling and a little unsettling.

Thanks for your help!


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have a Desktop Computer anymore?

No
Yes, but only at work
Yes, but its rarely used
Yes, and its a workhorse


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History




Data Recovery Software