Kuang2 Web Updater


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Vendor Notes:

From the doc: 'This program will take a list of kuang infected hosts that you supply and connect to each one, forcing it to download a url and run it. To load your list of hosts right click on the list box and choose 'Load'. Then specify your URL and click 'Update!'.'

Alias:

TrojanDownloader.Win32.Aphex.h, W95/Kuang.updater

Category:

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Variants:

  • Kuang2 Web Updater 1.0
  • Kuang2 Web Updater 1.1
  • Similar Pests:

    Downloader

    Origins

    Author:

    Aphex

    Group:

    EES

    By This Group:

    Aphex Command Line Tools ·

    Date of Origin:

    Variants from August, 2002 to April, 2003

    Distribution

    Prevalence:

  • Kuang2 Web Updater 1.0: 0.2%
  • More Info

    Clot Factor:

  • Kuang2 Web Updater 1.0: < 1
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Countries Affected:

    In the past three months, we have received reports of Kuang2 Web Updater in United States.

    Operation

    Storage Required:

  • Kuang2 Web Updater 1.0: at least 181 KB
  • Kuang2 Web Updater 1.1: at least 185 KB
  • ScreenShot:


    Kuang2 Web Updater 1.1


    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove Kuang2 Web Updater from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    April 03, 2005