Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Sep 30th, 2008, 6:49pm
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   HELP! Scan says I have a TROJAN!		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: HELP! Scan says I have a TROJAN!  (Read 628 times)
skee
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 5
HELP! Scan says I have a TROJAN!
« on: Feb 3rd, 2003, 3:56pm »		 Quote Quote  Modify Modify
The message from trojan hunter is that I have the KUANG.200 trojan and it has been removerd from my memory. After running the scan the trojan file is detected as CDEZTKS.EXE. I cant remove it, the program changes its file extension and I delete it but it keeps coming back. I tried starting in DOS and deleting it but that has not worked either. I must be hidden in my registry and/or start-up programs but I cant seem to locate it. HELP!!!!!!!!
IP Logged
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: HELP! Scan says I have a TROJAN!
« Reply #1 on: Feb 3rd, 2003, 4:17pm »		 Quote Quote  Modify Modify
Hi Skee,
 
Welcome to the forum. I have done some research for you and discovered that Kuang is running each time you reboot your machine because of an entry in your registry. This causes the file to run each time you clean it. If you are confident editing the registry you should be able to remove it yourself  Smiley, if not post back and I can give you some easier instructions. There should be an entry in:
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
filename.task="C:\WINDOWS\SYSTEM\filename.exe"  
 
which you will need to delete. There will be other entries here so make sure that you are certain before you delete it. The name of the file may vary.  
 
I suggest that you first clean the Trojan file in the normal way and then remove this entry and the file that it points to. If you are not sure at any point about whether to delete something post back and ask. I have also posted one of the URL's about the trojan here:
 
http://www3.ca.com/virusinfo/Virus.asp?ID=9787
 
I hope this help. Post back and let me know.
 
Ach
 
PS This topic really belongs in the TrojanHunter group rather than here. People will also spot it quicker if it is there.  Wink
« Last Edit: Feb 3rd, 2003, 4:21pm by acheton » IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
skee
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 5
Re: HELP! Scan says I have a TROJAN!
« Reply #2 on: Feb 3rd, 2003, 5:06pm »		 Quote Quote  Modify Modify
Thanks, I'll try it out and repost this meesage to that forum in case anyone else has any info on it.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register