Article View: comp.os.ms-windows.misc
Article #3093Re: KAK.HTA
From: Dane Allison
Date: Mon, 31 Jul 2000 00:00
Date: Mon, 31 Jul 2000 00:00
50 lines
2602 bytes
2602 bytes
I got this virus from this newsgroup - reinstalled windows but it came back through the emails i had backed up. (after mcafee tells me it has fixed it) It seems that the only way to beat it is to spend few hours working out what it does - the virus is quite simple, infact you will find it quite clever when you work out what it does.. Just search for *.kak;kak.* in search and there will be a file inyour system directory that is a .reg file. this is where the virus edits your registry every time you boot. read it with notepad and delete the entries it makes, and delete the file. Delete any other .kak files or kak.whatever aswell, they are not needed by anything but the virus. The virus also edits your autoexec.bat every time you boot.. and puts your old one as ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the old one. I followed the instructions on a web site posted by someone last time this virus hit this group, and it didnt work, so try fixing it yourself.. oh yeah and remember to make sure you have windows set to show all files, because most of the virus files are hidden.. I know this probably makes hardly any sense - but it was a few weeks ago i fixed it now, so i am trying to remember .. Good Luck !!! On Mon, 31 Jul 2000, Marsh wrote: > I've just reinstalled Windows 98 and towards the end of start up I get a > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA. > > What is this window and why does it pop up? > > What can I do to get rid of it? Is it safe to delete? > > Cheers, > Marsh. > > > dane allison email: s358148@student.uq.edu.au ICQ: 15043255 www: www.baydolphin.com.au
Technical Details
Message-ID:
<Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<nJ1h5.56656$N4.1791966@ozemail.com.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1102f1,1bcd5040a7c36e64 X-Google-Attributes: gid1102f1,public X-Google-Thread: 1070cf,1bcd5040a7c36e64 X-Google-Attributes: gid1070cf,public X-Google-Thread: 108c83,1bcd5040a7c36e64 X-Google-Attributes: gid108c83,public From: Dane Allison <s358148@student.uq.edu.au> Subject: Re: KAK.HTA Date: 2000/07/31 Message-ID: <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au> X-Deja-AN: 652634465 References: <nJ1h5.56656$N4.1791966@ozemail.com.au> To: Marsh <mtwilk@ozemail.com.au> Content-Type: TEXT/PLAIN; charset=US-ASCII X-Complaints-To: news@uq.edu.au X-Trace: bunyip.cc.uq.edu.au 965015809 31608 130.102.2.20 (31 Jul 2000 03:56:49 GMT) Organization: University of Queensland Mime-Version: 1.0 NNTP-Posting-Date: 31 Jul 2000 03:56:49 GMT Newsgroups: comp.os.ms-windows.misc,alt.windows98,aus.computers