🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.ms-windows.misc
Article #3093

Re: KAK.HTA

#3093
From: Dane Allison
Date: Mon, 31 Jul 2000 00:00
50 lines
2602 bytes
I got this virus from this newsgroup - reinstalled windows but it came
back through the emails i had backed up. (after mcafee tells me it has
fixed it)

It seems that the only way to beat it is to spend  few hours working out
what it does - the virus is quite simple, infact you will find it quite
clever when you work out what it does..

Just search for *.kak;kak.* in search and there will be a file inyour
system directory that is a .reg file. this is where the virus edits your
registry every time you boot. read it with notepad and delete the entries
it makes, and delete the file. Delete any other .kak files or kak.whatever
aswell, they are not needed by anything but the virus. The virus also
edits your autoexec.bat every time you boot.. and puts your old one as
ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
old one.

I followed the instructions on a web site posted by someone last time this
virus hit this group, and it didnt work, so try fixing it yourself..

oh yeah and remember to make sure you have windows set to show all files,
because most of the virus files are hidden..

I know this probably makes hardly any sense - but it was a few weeks ago i
fixed it now, so i am trying to remember ..

Good Luck !!! 



On Mon, 31 Jul 2000, Marsh wrote:

> I've just reinstalled Windows 98 and towards the end of start up I get a
> window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> 
> What is this window and why does it pop up?
> 
> What can I do to get rid of it? Is it safe to delete?
> 
> Cheers,
> Marsh.
> 
> 
> 

dane allison
email: s358148@student.uq.edu.au
ICQ: 15043255
www: www.baydolphin.com.au
Technical Details
Message-ID: <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <nJ1h5.56656$N4.1791966@ozemail.com.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1102f1,1bcd5040a7c36e64
X-Google-Attributes: gid1102f1,public
X-Google-Thread: 1070cf,1bcd5040a7c36e64
X-Google-Attributes: gid1070cf,public
X-Google-Thread: 108c83,1bcd5040a7c36e64
X-Google-Attributes: gid108c83,public
From: Dane Allison <s358148@student.uq.edu.au>
Subject: Re: KAK.HTA
Date: 2000/07/31
Message-ID: <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au>
X-Deja-AN: 652634465
References: <nJ1h5.56656$N4.1791966@ozemail.com.au>
To: Marsh <mtwilk@ozemail.com.au>
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Complaints-To: news@uq.edu.au
X-Trace: bunyip.cc.uq.edu.au 965015809 31608 130.102.2.20 (31 Jul 2000 03:56:49 GMT)
Organization: University of Queensland
Mime-Version: 1.0
NNTP-Posting-Date: 31 Jul 2000 03:56:49 GMT
Newsgroups: comp.os.ms-windows.misc,alt.windows98,aus.computers