Author Topic: Win32:Kuang2 in chest....now what?  (Read 13806 times)

0 Members and 1 Guest are viewing this topic.

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Win32:Kuang2 in chest....now what?
« on: March 30, 2005, 08:00:05 PM »
Newbie here.
On my first scan this virus was found in C:\WINDOWS\System32\ActiveScan.  Avanti said to move it to the "Chest' and here it sits.
What do I do now?
Gulp
Thanks for any and all help as I am new to

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #1 on: March 30, 2005, 08:02:58 PM »
I didn't finish the whole location entry.
Should read C:\Windows\system32\activescan\imscan.dll
Thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85163
  • No support PMs thanks
Re: Win32:Kuang2 in chest....now what?
« Reply #2 on: March 30, 2005, 08:45:36 PM »
It would appear that you are suffering from Panda's on-line scan failing to encrypt its virus pattern file, and avast recognising the signature of win32:kuang2, a search of thes forums for win32:kuang2 will reveal this Panda issue.

I would suggest you don't use Panda's on-line scan but one of the others that don't result in their virus pattern files being falsley recognised as a viurs.

On-line Virus Scanners and other useful Links Security.Ops.tk
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline techie101returns

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1900
Re: Win32:Kuang2 in chest....now what?
« Reply #3 on: March 30, 2005, 08:48:40 PM »
Iraskindc,

Actually put it back.  You more than likely have a "false postive" caused by the way Avast compares "suspect files" to the database.  READ THIS, for a more in depth explanation.

Was the scan result that of Panda?  Do you have Panda antivirus running on your computer?

A: This is a known problem. Let´s try to explain what´s going on:

Every virus can be identified, because it contains some unique signatures. Antiviral programs have their own database of that signatures. We call this database the "virus definition file".
When an antiviral program scans a file for viruses, it compares all the signatures (of all viruses) in the database with the signatures in that file. If the signatures match (they are the same), the file is marked as infected. For an antivirus program, it is important to hide this database of signatures somehow - e.g. by encrypting it. Panda Antivirus does not encrypt its virus database - the signatures inside are clearly "visible" to other antiviral programs, so they detect this file as infected (but there is actually no virus inside - only the signatures are the same).

We can´t do anything about that, only recommend not to use two or more antiviral programs at the same time, or put that files to the list of exclusions, so they will not be scanned anymore.
Additional info:

Here is the list of Panda Antivirus files that avast! detects as infected:

    * IMSCAN.DLL
    * PAVDLL.DLL
    * PAV.SIG
    * APVXD.VX2
    * APVXD.VXD

Here is the "virus that you detected in the mentioned.  Avast "sees" the unencrypted database file" as an actual virus.
   
    * Win32:Kuang2
   
You can restore the file to where it came from.

Take Care.
« Last Edit: March 30, 2005, 08:50:59 PM by Techie101 »

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #4 on: March 30, 2005, 09:42:43 PM »
Thanks for your replies.
The thing is that I don't use Panda...
What now?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85163
  • No support PMs thanks
Re: Win32:Kuang2 in chest....now what?
« Reply #5 on: March 30, 2005, 09:57:51 PM »
Ok, perhaps you don't have Panda installed but it is certainly an element of Panda Anti Virus (PAV) and someone at some time has run an on-line scan that uses the PAV on-line scanner.

http://www.avast.com/eng/virus_detection_and.html
http://bucarotechelp.com/computers/98011771.asp

There may be a means of uninstalling it, check add remove programs.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #6 on: March 30, 2005, 10:02:27 PM »
Thanks David.
So there is NO CHANCE that this is a virus?
The reason that I ask is that I had to uninstall Norton because it got corrupted by something.
No chance?
Thanks.
Lisa

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Win32:Kuang2 in chest....now what?
« Reply #7 on: March 30, 2005, 10:06:46 PM »
So there is NO CHANCE that this is a virus?

No, it's not a virus.  8)
You can submit the file to Jotti.
The best things in life are free.

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #8 on: March 31, 2005, 12:00:33 AM »
Dear Technical,

Thanks.  I opened up the link to Jotti and I am sorry to say I don't know how to send it to them for scanning as it is inside Avanti's chest.  How do I do that?
Thanks so so much.
Lisa

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Win32:Kuang2 in chest....now what?
« Reply #9 on: March 31, 2005, 03:12:55 AM »
Dear Technical, Thanks.  I opened up the link to Jotti and I am sorry to say I don't know how to send it to them for scanning as it is inside Avanti's chest.  How do I do that?

It's my fault. You can't scan a file that is into avast! Chest.
Chest is unreachable. It's made to be unreachable and safe.
You can 'extract' the file to a floppy and scan there.
But, believe, these files are false positives, not really a virus.
You can let them into avast! Chest for more 30 days and wait until you feel safe to delete them.  ;)
The best things in life are free.

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #10 on: March 31, 2005, 03:25:03 PM »
Thanks Technical.
One question though....up above Techie said to put the file back.
But you say to delete it?
Which should I do.  I'm not clear.  Is it a necessary file that I should put back or should I delete it?
Thanks!
REALLY appreciate this.
Lisa

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Win32:Kuang2 in chest....now what?
« Reply #11 on: March 31, 2005, 03:44:42 PM »
Thanks Technical. One question though....up above Techie said to put the file back. But you say to delete it?
Which should I do.  I'm not clear.  Is it a necessary file that I should put back or should I delete it?

I think you can delete it if you do not intend to use Panda scanning anymore.
If you want to use it, you should add this file to avast exclusion list.

If you have doubt, it's safer and easier to keep this file into avast! Chest to decide later  8)
The best things in life are free.

Offline lraskindc

  • Newbie
  • *
  • Posts: 7
Re: Win32:Kuang2 in chest....now what?
« Reply #12 on: March 31, 2005, 07:03:02 PM »
Whew.
Thanks so much Technical for all your help!
Have an awesome day!
Lisa