Results 1 to 5 of 5

Thread: Kuang2

  1. June 8th, 2003, 12:19 PM #1
    z0mbi3
    z0mbi3 is offline
    Junior Member
    Join Date
    Dec 2002
    Posts
    26

    Kuang2

    I've recently noticed a large increase in Kuang2 port probes against my network. I done my research and it seems that more people that just myself are expericencing this increase in port 17300 probes. Kuang2 is a relatively old virus/trojan(1999) and am wondering if something bigger is at play here, like zombies being gathered for a DDOS in the near future or maybe even a launch pad for the next large scale virus. Has anyone heard anything about the possibility of ethier one of these scenarios? Does anyone know if any variants have been found that affect Windows 2000 or Windows NT yet?

    Also does anyone have a snort signature for Kuang2 or better yet a link to download the actual program.
    Reply With Quote Reply With Quote
  2. June 8th, 2003, 12:28 PM #2
    thehorse13
    thehorse13 is offline
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,885
    One can only guess but one thing to keep in mind is that old viruses, trojans, etc. commonly reappear after some time has passed.

    This may help you:
    http://www.lurhq.com/sig-milkit.htm
    http://packetstormsecurity.nl/Crackers/kuang2/
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden
    Reply With Quote Reply With Quote
  3. June 8th, 2003, 12:32 PM #3
    PabloEskobar
    PabloEskobar is offline
    Junior Member
    Join Date
    May 2003
    Posts
    2
    But ther is a lot of new version of Kuang2.....

    Ther is a kuang4, kuang4sserver, kuang4passwordsender ect.


    Go to some antivirus co. and look fot answers!
    Reply With Quote Reply With Quote
  4. June 8th, 2003, 01:13 PM #4
    willy
    willy is offline
    Junior Member
    Join Date
    May 2003
    Posts
    12
    Yeah, you are definately not alone, z0mbi3. My eyes almost popped out of my head when I looked at my outpost logs last night. Thanks for the links thehorse13.
    Reply With Quote Reply With Quote
  5. June 8th, 2003, 05:22 PM #5
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    same here but i think that will soon be dwarfed by 1028 scans with the rapid spread of bugbearb
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules