Event ID - 420

Port No420
Service NameW32.Kibuv.E
RFC Doc0
ProtocolTCP
DescriptionW32.Kibuv.E is a minor variant of W32.Kibuv.C. It is a worm that attempts to spread itself through IRC, FTP, and by exploiting vulnerabilities.
Reference LinkPort Number:420 Service Name:W32.Kibuv.E Port:TCP
AttackAccording to Symantec

Resolution:
The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.
1.Disable System Restore (Windows XP).
2.Update the virus definitions.
3.Restart the computer in Safe mode or VGA mode.
4.Run a full system scan and delete all the files detected as W32.Kibuv.E.
5.Reverse the changes that the worm made to the registry.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.