🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.ms-windows.misc
Article #3094

Re: KAK.HTA

#3094
From: Robp2001
Date: Mon, 31 Jul 2000 00:00
62 lines
3037 bytes
you dident get the KAK virus from this Ng, unless you picked up a HTML
message, because the kak virus is a html virus, these posts are plain text.

almost certain it was from a email.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
Dane Allison <s358148@student.uq.edu.au> wrote in message
news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au...
>
> I got this virus from this newsgroup - reinstalled windows but it came
> back through the emails i had backed up. (after mcafee tells me it has
> fixed it)
>
> It seems that the only way to beat it is to spend  few hours working out
> what it does - the virus is quite simple, infact you will find it quite
> clever when you work out what it does..
>
> Just search for *.kak;kak.* in search and there will be a file inyour
> system directory that is a .reg file. this is where the virus edits your
> registry every time you boot. read it with notepad and delete the entries
> it makes, and delete the file. Delete any other .kak files or kak.whatever
> aswell, they are not needed by anything but the virus. The virus also
> edits your autoexec.bat every time you boot.. and puts your old one as
> ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
> old one.
>
> I followed the instructions on a web site posted by someone last time this
> virus hit this group, and it didnt work, so try fixing it yourself..
>
> oh yeah and remember to make sure you have windows set to show all files,
> because most of the virus files are hidden..
>
> I know this probably makes hardly any sense - but it was a few weeks ago i
> fixed it now, so i am trying to remember ..
>
> Good Luck !!!
>
>
>
> On Mon, 31 Jul 2000, Marsh wrote:
>
> > I've just reinstalled Windows 98 and towards the end of start up I get a
> > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> >
> > What is this window and why does it pop up?
> >
> > What can I do to get rid of it? Is it safe to delete?
> >
> > Cheers,
> > Marsh.
> >
> >
> >
>
> dane allison
> email: s358148@student.uq.edu.au
> ICQ: 15043255
> www: www.baydolphin.com.au
>
>
Technical Details
Message-ID: <8m2ue1$6ki$1@gxsn.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1102f1,1bcd5040a7c36e64
X-Google-Attributes: gid1102f1,public
X-Google-Thread: 1070cf,1bcd5040a7c36e64
X-Google-Attributes: gid1070cf,public
X-Google-Thread: 108c83,1bcd5040a7c36e64
X-Google-Attributes: gid108c83,public
From: "Robp2001" <emails@pearls.com>
Subject: Re: KAK.HTA
Date: 2000/07/31
Message-ID: <8m2ue1$6ki$1@gxsn.com>
X-Deja-AN: 652637494
References: <nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au>
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
X-Complaints-To: abuse@gxsn.com
X-Trace: 965016833 1NNUCNF1GA3E1C393C gxsn.com
Organization: GXSN
X-MSMail-Priority: Normal
Newsgroups: comp.os.ms-windows.misc,alt.windows98,aus.computers