Kuang2 the Virus Detection

critical Nessus Plugin ID 10132

Synopsis

The remote host is infected by a virus.

Description

Kuang2 the Virus was found.

Kuang2 the Virus is a program that infects all the executables on the system, as well as set up a server that allows the remote control of the computer. The client program allows files to be browsed, uploaded, downloaded, hidden, etc on the infected machine. The client program can also execute programs on the remote machine.

Kuang2 the Virus also has plugins that can be used that allows the client to do things to the remote machine, such as hide the icons and start menu, invert the desktop, pop up message windows, etc.

Solution

Disinfect the computer with the latest copy of virus scanning software.
Alternatively, you can find a copy of the virus itself on the net by doing an Altavista search. The virus comes with the server, client and infector programs. The client program not only allows you to remotely control infected machines, but disinfect the machine the client is running on.

See Also

http://vil.mcafee.com/dispVirus.asp?virus_k=10213

Plugin Details

Severity: Critical

ID: 10132

File Name: kuang2_the_virus.nasl

Version: Revision: 1.20

Type: remote

Family: Backdoors

Published: 2/17/2000

Updated: 1/25/2013

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C