MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: worm kwbot detected!!!
December 12, 2019, 01:59:39 PM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
December 12, 2019, 01:59:39 PM

Login with username, password and session length
 Featured Sites:
News
Article Writers We are looking for quality, informational articles to add to our Computer Articles
Please contact us if you are interested in submitting some....
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: worm kwbot detected!!!  (Read 1539 times)
younggun87
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 2


Bookmark and Share

View Profile
« on: March 04, 2004, 01:54:30 PM »

PLEASE SUPPLY RELEVANT INFORMATION:
Operating System Version:
Problem Application Name & Version:
Problem Hardware Make & Model:
Error Messages:



after i have successfully dealt with cmd32.exe virus thx to admins crisp solutions, my anti virus detected a virus called worm kwbot!!
in one day, i have detected two viruses.. what is going on?

admin could you please provide me with step-by-step solutions on what to do?
Logged

 
sixpac
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 45


Bookmark and Share

View Profile
« Reply #1 on: March 04, 2004, 03:14:28 PM »

I don't know what operating system or AV you use or the names of the 2 viruses that were found, but to get rid of kwbot

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entries

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Windows Explorer Update Build 1142 = explorer32

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Windows Explorer Update Build 1142 = explorer32

and delete them if they exist.

Close the registry editor.

Logged

 
younggun87
Newbie
*

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 2


Bookmark and Share

View Profile
« Reply #2 on: March 05, 2004, 01:43:01 PM »

my os is XP and i recently found cmd32.exe virus and kwbot virus.
i do know how to run regedit but do not know the purpose of "back up" files.
when i want to run regedit, i goto run-> regedit right? not run-> my "back up" file.

anyway, my com is definetly running poorly..
Logged

 
sj1184
Hero Member
*****

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 323


Bookmark and Share

View Profile
« Reply #3 on: March 05, 2004, 03:36:55 PM »

Hi YG,
What Six means by backing up is to make a copy of the registry so in case you mess up,you can "merge" it,otherwise you can really screw up the computer.
You would click start>run,then key in "regedit".To back it up,run regedit,then click "registry" at the top,then "export" it to your desktop.
Take care.
Logged

Sandy
sixpac
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 45


Bookmark and Share

View Profile
« Reply #4 on: March 05, 2004, 10:41:11 PM »

If

 HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Windows Explorer Update Build 1142 = explorer32

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Windows Explorer Update Build 1142 = explorer32

 don't exist

Navigate to the keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices


In the right pane, delete the value:

"syscfg" = "syscfg32.exe"


Exit the Registry Editor.
Logged

 
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page April 01, 2019, 08:33:58 PM