Event ID - 17300

Port No17300
Service NameKuang2 the virus
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95 and 98. It can infect files on a Windows NT machine, but the server program is not correctly installed.
Reference LinkKuang2_the_virus
AttackRegisters:
HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Files:
Kuang2thevirus0.21.zip - 26,524 bytes Kung2 Client.exe - 23,552 bytes Kung2 Infector.exe - 9,216 bytes Kung2 Thevirus.exe - 10,240 bytes Ozq-ozfds2.exe - (Win95) Kzswoh.exe - (Win98)

Actions:
Remote Access / Virus
Coded in protest against the war NATO vs Yugoslavia. Partial virus, partial trojan. It can be updated using plug-ins.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.