what's kp.exe?

[zulu9812]

it's located in C:\WINNT\System32 (Win2k SP4), keeps trying to access the internet, keeps asking for server rights and is not a virus. Any thoughts?

 

[Bozo Erectus]

Its a backdoor virus.

The W32.Randex.P dropper will drop and run the worm file as Gfac.exe, as well as the Kp.exe file, which is detected as Backdoor.Mprox.

The above is from:

http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.p.html

 

[IceBlaZe]

What antivirus protects you zulu?

 

[zulu9812]

AVG