Article View: comp.os.ms-windows.misc
Article #3095Re: KAK.HTA
From: Robert Schumacher
Date: Mon, 31 Jul 2000 00:00
Date: Mon, 31 Jul 2000 00:00
82 lines
3612 bytes
3612 bytes
Another really good reason to stick to plain text for NG posts. -- Robert Schumacher remove IDONTTHINKSO to reply by e-mail "I've always wondered why the needle is sterilized for execution by lethal injection." "Robp2001" <emails@pearls.com> wrote in message news:8m2ue1$6ki$1@gxsn.com... > you dident get the KAK virus from this Ng, unless you picked up a HTML > message, because the kak virus is a html virus, these posts are plain text. > > almost certain it was from a email. > > -- > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > 'Killing one bird with two stones... (well, not everyone's a great shot !) > Dane Allison <s358148@student.uq.edu.au> wrote in message > news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au... > > > > I got this virus from this newsgroup - reinstalled windows but it came > > back through the emails i had backed up. (after mcafee tells me it has > > fixed it) > > > > It seems that the only way to beat it is to spend few hours working out > > what it does - the virus is quite simple, infact you will find it quite > > clever when you work out what it does.. > > > > Just search for *.kak;kak.* in search and there will be a file inyour > > system directory that is a .reg file. this is where the virus edits your > > registry every time you boot. read it with notepad and delete the entries > > it makes, and delete the file. Delete any other .kak files or kak.whatever > > aswell, they are not needed by anything but the virus. The virus also > > edits your autoexec.bat every time you boot.. and puts your old one as > > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the > > old one. > > > > I followed the instructions on a web site posted by someone last time this > > virus hit this group, and it didnt work, so try fixing it yourself.. > > > > oh yeah and remember to make sure you have windows set to show all files, > > because most of the virus files are hidden.. > > > > I know this probably makes hardly any sense - but it was a few weeks ago i > > fixed it now, so i am trying to remember .. > > > > Good Luck !!! > > > > > > > > On Mon, 31 Jul 2000, Marsh wrote: > > > > > I've just reinstalled Windows 98 and towards the end of start up I get a > > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA. > > > > > > What is this window and why does it pop up? > > > > > > What can I do to get rid of it? Is it safe to delete? > > > > > > Cheers, > > > Marsh. > > > > > > > > > > > > > dane allison > > email: s358148@student.uq.edu.au > > ICQ: 15043255 > > www: www.baydolphin.com.au > > > > > >
Technical Details
Message-ID:
<%e7h5.979$d4.8824@typhoon.hawaii.rr.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au> <8m2ue1$6ki$1@gxsn.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1102f1,1bcd5040a7c36e64 X-Google-Attributes: gid1102f1,public X-Google-Thread: 1070cf,1bcd5040a7c36e64 X-Google-Attributes: gid1070cf,public X-Google-Thread: 108c83,1bcd5040a7c36e64 X-Google-Attributes: gid108c83,public From: "Robert Schumacher" <subsailor@IDONTTHINKSO.hawaii.rr.com> Subject: Re: KAK.HTA Date: 2000/07/31 Message-ID: <%e7h5.979$d4.8824@typhoon.hawaii.rr.com> X-Deja-AN: 652640171 References: <nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au> <8m2ue1$6ki$1@gxsn.com> X-Priority: 3 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 X-Complaints-To: abuse@rr.com X-Trace: typhoon.hawaii.rr.com 965017659 24.165.38.3 (Sun, 30 Jul 2000 18:27:39 HST) X-MSMail-Priority: Normal NNTP-Posting-Date: Sun, 30 Jul 2000 18:27:39 HST Newsgroups: comp.os.ms-windows.misc,alt.windows98,aus.computers