Article View: comp.os.ms-windows.misc
Article #3097Re: KAK.HTA
From: Rod Speed
Date: Mon, 31 Jul 2000 00:00
Date: Mon, 31 Jul 2000 00:00
69 lines
3177 bytes
3177 bytes
Robp2001 <emails@pearls.com> wrote in message news:8m2ue1$6ki$1@gxsn.com... > you dident get the KAK virus from this Ng, unless you picked up a HTML > message, because the kak virus is a html virus, these posts are plain text. > almost certain it was from a email. It was an html post in this NG. Reasonable thread resulted, still visible in deja. > Dane Allison <s358148@student.uq.edu.au> wrote >> I got this virus from this newsgroup - reinstalled >> windows but it came back through the emails i had >> backed up. (after mcafee tells me it has fixed it) > > > > It seems that the only way to beat it is to spend few hours working out > > what it does - the virus is quite simple, infact you will find it quite > > clever when you work out what it does.. > > > > Just search for *.kak;kak.* in search and there will be a file inyour > > system directory that is a .reg file. this is where the virus edits your > > registry every time you boot. read it with notepad and delete the entries > > it makes, and delete the file. Delete any other .kak files or kak.whatever > > aswell, they are not needed by anything but the virus. The virus also > > edits your autoexec.bat every time you boot.. and puts your old one as > > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the > > old one. > > > > I followed the instructions on a web site posted by someone last time this > > virus hit this group, and it didnt work, so try fixing it yourself.. > > > > oh yeah and remember to make sure you have windows set to show all files, > > because most of the virus files are hidden.. > > > > I know this probably makes hardly any sense - but it was a few weeks ago i > > fixed it now, so i am trying to remember .. > > > > Good Luck !!! > > > > > > > > On Mon, 31 Jul 2000, Marsh wrote: > > > > > I've just reinstalled Windows 98 and towards the end of start up I get a > > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA. > > > > > > What is this window and why does it pop up? > > > > > > What can I do to get rid of it? Is it safe to delete? > > > > > > Cheers, > > > Marsh. > > > > > > > > > > > > > dane allison > > email: s358148@student.uq.edu.au > > ICQ: 15043255 > > www: www.baydolphin.com.au > > > > > >
Technical Details
Message-ID:
<39851b49$0$11167$7f31c96c@news01.syd.optusnet.com.au>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au> <8m2ue1$6ki$1@gxsn.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1070cf,1bcd5040a7c36e64 X-Google-Attributes: gid1070cf,public X-Google-Thread: 1102f1,1bcd5040a7c36e64 X-Google-Attributes: gid1102f1,public X-Google-Thread: 108c83,1bcd5040a7c36e64 X-Google-Attributes: gid108c83,public From: "Rod Speed" <rod_speed@yahoo.com> Subject: Re: KAK.HTA Date: 2000/07/31 Message-ID: <39851b49$0$11167$7f31c96c@news01.syd.optusnet.com.au> X-Deja-AN: 652662973 References: <nJ1h5.56656$N4.1791966@ozemail.com.au> <Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au> <8m2ue1$6ki$1@gxsn.com> X-Priority: 3 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 X-Trace: 965024586 news01.syd.optusnet.com.au 11167 198.142.212.181 Organization: The Grunge X-MSMail-Priority: Normal Newsgroups: comp.os.ms-windows.misc,alt.windows98,aus.computers