🚀 go-pugleaf

checkout http://www.getvirushelp.com/kak/
Marsh <mtwilk@ozemail.com.au> wrote in message
news:nJ1h5.56656$N4.1791966@ozemail.com.au...
> I've just reinstalled Windows 98 and towards the end of start up I get a
> window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
>
> What is this window and why does it pop up?
>
> What can I do to get rid of it? Is it safe to delete?
>
> Cheers,
> Marsh.
>
>

I got this virus from this newsgroup - reinstalled windows but it came
back through the emails i had backed up. (after mcafee tells me it has
fixed it)

It seems that the only way to beat it is to spend  few hours working out
what it does - the virus is quite simple, infact you will find it quite
clever when you work out what it does..

Just search for *.kak;kak.* in search and there will be a file inyour
system directory that is a .reg file. this is where the virus edits your
registry every time you boot. read it with notepad and delete the entries
it makes, and delete the file. Delete any other .kak files or kak.whatever
aswell, they are not needed by anything but the virus. The virus also
edits your autoexec.bat every time you boot.. and puts your old one as
ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
old one.

I followed the instructions on a web site posted by someone last time this
virus hit this group, and it didnt work, so try fixing it yourself..

oh yeah and remember to make sure you have windows set to show all files,
because most of the virus files are hidden..

I know this probably makes hardly any sense - but it was a few weeks ago i
fixed it now, so i am trying to remember ..

Good Luck !!! 



On Mon, 31 Jul 2000, Marsh wrote:

> I've just reinstalled Windows 98 and towards the end of start up I get a
> window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> 
> What is this window and why does it pop up?
> 
> What can I do to get rid of it? Is it safe to delete?
> 
> Cheers,
> Marsh.
> 
> 
> 

dane allison
email: s358148@student.uq.edu.au
ICQ: 15043255
www: www.baydolphin.com.au

you dident get the KAK virus from this Ng, unless you picked up a HTML
message, because the kak virus is a html virus, these posts are plain text.

almost certain it was from a email.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
Dane Allison <s358148@student.uq.edu.au> wrote in message
news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au...
>
> I got this virus from this newsgroup - reinstalled windows but it came
> back through the emails i had backed up. (after mcafee tells me it has
> fixed it)
>
> It seems that the only way to beat it is to spend  few hours working out
> what it does - the virus is quite simple, infact you will find it quite
> clever when you work out what it does..
>
> Just search for *.kak;kak.* in search and there will be a file inyour
> system directory that is a .reg file. this is where the virus edits your
> registry every time you boot. read it with notepad and delete the entries
> it makes, and delete the file. Delete any other .kak files or kak.whatever
> aswell, they are not needed by anything but the virus. The virus also
> edits your autoexec.bat every time you boot.. and puts your old one as
> ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
> old one.
>
> I followed the instructions on a web site posted by someone last time this
> virus hit this group, and it didnt work, so try fixing it yourself..
>
> oh yeah and remember to make sure you have windows set to show all files,
> because most of the virus files are hidden..
>
> I know this probably makes hardly any sense - but it was a few weeks ago i
> fixed it now, so i am trying to remember ..
>
> Good Luck !!!
>
>
>
> On Mon, 31 Jul 2000, Marsh wrote:
>
> > I've just reinstalled Windows 98 and towards the end of start up I get a
> > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> >
> > What is this window and why does it pop up?
> >
> > What can I do to get rid of it? Is it safe to delete?
> >
> > Cheers,
> > Marsh.
> >
> >
> >
>
> dane allison
> email: s358148@student.uq.edu.au
> ICQ: 15043255
> www: www.baydolphin.com.au
>
>

Another really good reason to stick to plain text for NG posts.

--
Robert Schumacher
remove IDONTTHINKSO to reply by e-mail
"I've always wondered why the needle is sterilized for execution by lethal
injection."


"Robp2001" <emails@pearls.com> wrote in message
news:8m2ue1$6ki$1@gxsn.com...
> you dident get the KAK virus from this Ng, unless you picked up a HTML
> message, because the kak virus is a html virus, these posts are plain
text.
>
> almost certain it was from a email.
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 'Killing one bird with two stones... (well, not everyone's a great shot !)
> Dane Allison <s358148@student.uq.edu.au> wrote in message
> news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au...
> >
> > I got this virus from this newsgroup - reinstalled windows but it came
> > back through the emails i had backed up. (after mcafee tells me it has
> > fixed it)
> >
> > It seems that the only way to beat it is to spend  few hours working out
> > what it does - the virus is quite simple, infact you will find it quite
> > clever when you work out what it does..
> >
> > Just search for *.kak;kak.* in search and there will be a file inyour
> > system directory that is a .reg file. this is where the virus edits your
> > registry every time you boot. read it with notepad and delete the
entries
> > it makes, and delete the file. Delete any other .kak files or
kak.whatever
> > aswell, they are not needed by anything but the virus. The virus also
> > edits your autoexec.bat every time you boot.. and puts your old one as
> > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
> > old one.
> >
> > I followed the instructions on a web site posted by someone last time
this
> > virus hit this group, and it didnt work, so try fixing it yourself..
> >
> > oh yeah and remember to make sure you have windows set to show all
files,
> > because most of the virus files are hidden..
> >
> > I know this probably makes hardly any sense - but it was a few weeks ago
i
> > fixed it now, so i am trying to remember ..
> >
> > Good Luck !!!
> >
> >
> >
> > On Mon, 31 Jul 2000, Marsh wrote:
> >
> > > I've just reinstalled Windows 98 and towards the end of start up I get
a
> > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> > >
> > > What is this window and why does it pop up?
> > >
> > > What can I do to get rid of it? Is it safe to delete?
> > >
> > > Cheers,
> > > Marsh.
> > >
> > >
> > >
> >
> > dane allison
> > email: s358148@student.uq.edu.au
> > ICQ: 15043255
> > www: www.baydolphin.com.au
> >
> >
>
>

i cant seem to get rid of network.vbs... 

ros  :(



On Mon, 31 Jul 2000 00:08:01 +0100, "Robp2001" <emails@pearls.com>
wrote:

>yeah it's a virus man... been there done that one too..
>Anyone noticing that Network.vbs , and KAK virus's are getting everywhere,
>and no one seems to notice?, I get someone ask me about them every 3 days or
>so...

Robp2001 <emails@pearls.com> wrote in
message news:8m2ue1$6ki$1@gxsn.com...

> you dident get the KAK virus from this Ng, unless you picked up a HTML
> message, because the kak virus is a html virus, these posts are plain text.

> almost certain it was from a email.

It was an html post in this NG.

Reasonable thread resulted, still visible in deja.


> Dane Allison <s358148@student.uq.edu.au> wrote

>> I got this virus from this newsgroup - reinstalled
>> windows but it came back through the emails i had
>> backed up. (after mcafee tells me it has fixed it)
> >
> > It seems that the only way to beat it is to spend  few hours working out
> > what it does - the virus is quite simple, infact you will find it quite
> > clever when you work out what it does..
> >
> > Just search for *.kak;kak.* in search and there will be a file inyour
> > system directory that is a .reg file. this is where the virus edits your
> > registry every time you boot. read it with notepad and delete the entries
> > it makes, and delete the file. Delete any other .kak files or kak.whatever
> > aswell, they are not needed by anything but the virus. The virus also
> > edits your autoexec.bat every time you boot.. and puts your old one as
> > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
> > old one.
> >
> > I followed the instructions on a web site posted by someone last time this
> > virus hit this group, and it didnt work, so try fixing it yourself..
> >
> > oh yeah and remember to make sure you have windows set to show all files,
> > because most of the virus files are hidden..
> >
> > I know this probably makes hardly any sense - but it was a few weeks ago i
> > fixed it now, so i am trying to remember ..
> >
> > Good Luck !!!
> >
> >
> >
> > On Mon, 31 Jul 2000, Marsh wrote:
> >
> > > I've just reinstalled Windows 98 and towards the end of start up I get a
> > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> > >
> > > What is this window and why does it pop up?
> > >
> > > What can I do to get rid of it? Is it safe to delete?
> > >
> > > Cheers,
> > > Marsh.
> > >
> > >
> > >
> >
> > dane allison
> > email: s358148@student.uq.edu.au
> > ICQ: 15043255
> > www: www.baydolphin.com.au
> >
> >
>
>

Robp2001 <emails@pearls.com> wrote in message news:8m2ue1$6ki$1@gxsn.com...
> you dident get the KAK virus from this Ng, unless you picked up a HTML
> message, because the kak virus is a html virus, these posts are plain
text.

KAK virus was propagaged in an html post in aus.computers about six weeks
ago.

John

don't panic but you have the kak worm. it can be gotten rid of fairly easily
check out  www.datafellows.com/v-descs/kak.htm

or do a google search   www.google.com  for info on kak

you will have to delete the files with kak in them...just follow the
instructions...
kak is set up to crash your machine on the first of the month at 6pm i
believe...
it is not a virus which will erase your harddrive or anything but you will
want to deal with it right away.
Philo

yeah, and in all these years I STILL aint had a virus turn up on my systems
yet.

Note: I'm sure this post will spur attempts to give me a virus. As I said I
still aint seen one in the flesh unsolicited (though i have deliberately
asked for them to examine), go ahead. make my day,,,,punk.

The last virus I saw unsolicited was on a TAFE machine back in 1989 "The
marijuhana virus/happy virus/pot virus" on a 386 dos box.


--
_____________________________________________________
He would be out of his depth in a carpark puddle.
invasion@crosswinds.net   www.webpoint_design.web.com
The aliens aren't among us, we are the Aliens. Long Live Planet Earth
----------------------------------------------------------------------------
-------------------

yeah it's a virus man... been there done that one too..
Anyone noticing that Network.vbs , and KAK virus's are getting everywhere,
and no one seems to notice?, I get someone ask me about them every 3 days or
so...

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
Steve <sr200@nospambtinternet.com> wrote in message
news:8m2aff$l6b$1@uranium.btinternet.com...
> checkout http://www.getvirushelp.com/kak/
> Marsh <mtwilk@ozemail.com.au> wrote in message
> news:nJ1h5.56656$N4.1791966@ozemail.com.au...
> > I've just reinstalled Windows 98 and towards the end of start up I get a
> > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> >
> > What is this window and why does it pop up?
> >
> > What can I do to get rid of it? Is it safe to delete?
> >
> > Cheers,
> > Marsh.
> >
> >
>
>

Did a scan with Norton who found the following files infected with
WScript.KakWorm:
C:\WINDOWS\SYSTEM\18749CF2.hta
C:\WINDOWS\kak.htm

Norton recommends I delete these files. What do these files do?  Is it safe
to delete them?

Thanks,
Marsh.

Marsh <mtwilk@ozemail.com.au> wrote in message
news:nJ1h5.56656$N4.1791966@ozemail.com.au...
> I've just reinstalled Windows 98 and towards the end of start up I get a
> window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
>
> What is this window and why does it pop up?
>
> What can I do to get rid of it? Is it safe to delete?
>
> Cheers,
> Marsh.
>
>

yeah delete them, they dont do anything.... well not any good thing.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
Marsh <mtwilk@ozemail.com.au> wrote in message
news:5X2h5.56715$N4.1793723@ozemail.com.au...
> Did a scan with Norton who found the following files infected with
> WScript.KakWorm:
> C:\WINDOWS\SYSTEM\18749CF2.hta
> C:\WINDOWS\kak.htm
>
> Norton recommends I delete these files. What do these files do?  Is it
safe
> to delete them?
>
> Thanks,
> Marsh.
>
> Marsh <mtwilk@ozemail.com.au> wrote in message
> news:nJ1h5.56656$N4.1791966@ozemail.com.au...
> > I've just reinstalled Windows 98 and towards the end of start up I get a
> > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> >
> > What is this window and why does it pop up?
> >
> > What can I do to get rid of it? Is it safe to delete?
> >
> > Cheers,
> > Marsh.
> >
> >
>
>

To get rid of the virus go to  http://cperry.k12.pa.us/kakvirus.htm  I have
used this method on a friends machine and it worked , I did have to
reinstall IE 5
Graham
"Marsh" <mtwilk@ozemail.com.au> wrote in message
news:5X2h5.56715$N4.1793723@ozemail.com.au...
> Did a scan with Norton who found the following files infected with
> WScript.KakWorm:
> C:\WINDOWS\SYSTEM\18749CF2.hta
> C:\WINDOWS\kak.htm
>
> Norton recommends I delete these files. What do these files do?  Is it
safe
> to delete them?
>
> Thanks,
> Marsh.
>
> Marsh <mtwilk@ozemail.com.au> wrote in message
> news:nJ1h5.56656$N4.1791966@ozemail.com.au...
> > I've just reinstalled Windows 98 and towards the end of start up I get a
> > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> >
> > What is this window and why does it pop up?
> >
> > What can I do to get rid of it? Is it safe to delete?
> >
> > Cheers,
> > Marsh.
> >
> >
>
>

no it was posted to this newsgroup by some guy who didnt understand the
perils of posting in html..

it wasnt through email.

dane


Robp2001 <emails@pearls.com> wrote in message news:8m2ue1$6ki$1@gxsn.com...
> you dident get the KAK virus from this Ng, unless you picked up a HTML
> message, because the kak virus is a html virus, these posts are plain
text.
>
> almost certain it was from a email.
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 'Killing one bird with two stones... (well, not everyone's a great shot !)
> Dane Allison <s358148@student.uq.edu.au> wrote in message
> news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au...
> >
> > I got this virus from this newsgroup - reinstalled windows but it came
> > back through the emails i had backed up. (after mcafee tells me it has
> > fixed it)
> >
> > It seems that the only way to beat it is to spend  few hours working out
> > what it does - the virus is quite simple, infact you will find it quite
> > clever when you work out what it does..
> >
> > Just search for *.kak;kak.* in search and there will be a file inyour
> > system directory that is a .reg file. this is where the virus edits your
> > registry every time you boot. read it with notepad and delete the
entries
> > it makes, and delete the file. Delete any other .kak files or
kak.whatever
> > aswell, they are not needed by anything but the virus. The virus also
> > edits your autoexec.bat every time you boot.. and puts your old one as
> > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite the
> > old one.
> >
> > I followed the instructions on a web site posted by someone last time
this
> > virus hit this group, and it didnt work, so try fixing it yourself..
> >
> > oh yeah and remember to make sure you have windows set to show all
files,
> > because most of the virus files are hidden..
> >
> > I know this probably makes hardly any sense - but it was a few weeks ago
i
> > fixed it now, so i am trying to remember ..
> >
> > Good Luck !!!
> >
> >
> >
> > On Mon, 31 Jul 2000, Marsh wrote:
> >
> > > I've just reinstalled Windows 98 and towards the end of start up I get
a
> > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> > >
> > > What is this window and why does it pop up?
> > >
> > > What can I do to get rid of it? Is it safe to delete?
> > >
> > > Cheers,
> > > Marsh.
> > >
> > >
> > >
> >
> > dane allison
> > email: s358148@student.uq.edu.au
> > ICQ: 15043255
> > www: www.baydolphin.com.au
> >
> >
>
>

welcome to one reason i only pick up plain text, and scan websites before i
view em.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
no idea <dane@baydolphin.com.au> wrote in message news:39861953@grissom...
> no it was posted to this newsgroup by some guy who didnt understand the
> perils of posting in html..
>
> it wasnt through email.
>
> dane
>
>
> Robp2001 <emails@pearls.com> wrote in message
news:8m2ue1$6ki$1@gxsn.com...
> > you dident get the KAK virus from this Ng, unless you picked up a HTML
> > message, because the kak virus is a html virus, these posts are plain
> text.
> >
> > almost certain it was from a email.
> >
> > --
> > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> > 'Killing one bird with two stones... (well, not everyone's a great shot
!)
> > Dane Allison <s358148@student.uq.edu.au> wrote in message
> > news:Pine.OSF.4.21.0007311345490.14998-100000@student.uq.edu.au...
> > >
> > > I got this virus from this newsgroup - reinstalled windows but it came
> > > back through the emails i had backed up. (after mcafee tells me it has
> > > fixed it)
> > >
> > > It seems that the only way to beat it is to spend  few hours working
out
> > > what it does - the virus is quite simple, infact you will find it
quite
> > > clever when you work out what it does..
> > >
> > > Just search for *.kak;kak.* in search and there will be a file inyour
> > > system directory that is a .reg file. this is where the virus edits
your
> > > registry every time you boot. read it with notepad and delete the
> entries
> > > it makes, and delete the file. Delete any other .kak files or
> kak.whatever
> > > aswell, they are not needed by anything but the virus. The virus also
> > > edits your autoexec.bat every time you boot.. and puts your old one as
> > > ae.kak.. so you want to rename ae.kak as autoexec.bat, and overwrite
the
> > > old one.
> > >
> > > I followed the instructions on a web site posted by someone last time
> this
> > > virus hit this group, and it didnt work, so try fixing it yourself..
> > >
> > > oh yeah and remember to make sure you have windows set to show all
> files,
> > > because most of the virus files are hidden..
> > >
> > > I know this probably makes hardly any sense - but it was a few weeks
ago
> i
> > > fixed it now, so i am trying to remember ..
> > >
> > > Good Luck !!!
> > >
> > >
> > >
> > > On Mon, 31 Jul 2000, Marsh wrote:
> > >
> > > > I've just reinstalled Windows 98 and towards the end of start up I
get
> a
> > > > window entitled: C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA.
> > > >
> > > > What is this window and why does it pop up?
> > > >
> > > > What can I do to get rid of it? Is it safe to delete?
> > > >
> > > > Cheers,
> > > > Marsh.
> > > >
> > > >
> > > >
> > >
> > > dane allison
> > > email: s358148@student.uq.edu.au
> > > ICQ: 15043255
> > > www: www.baydolphin.com.au
> > >
> > >
> >
> >
>
>

if you want some to study, i can send you some, like safe though, i got 265
here., in encripted zip file, you want me to send you them? (not in a bad
way)

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
'Killing one bird with two stones... (well, not everyone's a great shot !)
Alien Spawn <invasion@crosswinds.net> wrote in message
news:398640aa$0$11143$7f31c96c@news01.syd.optusnet.com.au...
> yeah, and in all these years I STILL aint had a virus turn up on my
systems
> yet.
>
> Note: I'm sure this post will spur attempts to give me a virus. As I said
I
> still aint seen one in the flesh unsolicited (though i have deliberately
> asked for them to examine), go ahead. make my day,,,,punk.
>
> The last virus I saw unsolicited was on a TAFE machine back in 1989 "The
> marijuhana virus/happy virus/pot virus" on a 386 dos box.
>
>
> --
> _____________________________________________________
> He would be out of his depth in a carpark puddle.
> invasion@crosswinds.net   www.webpoint_design.web.com
> The aliens aren't among us, we are the Aliens. Long Live Planet Earth
> --------------------------------------------------------------------------
--
> -------------------
>
>
>
>
>
>

"Robp2001" <emails@pearls.com> wrote in message
news:8m5838$qfq$3@gxsn.com...
> welcome to one reason i only pick up plain text, and scan websites before
i
> view em.
>

Why not just disallow script running when reading HTML? When KAK came
through last, I got a few requesters asking me to allow running a script. I
said no and no probs.

--


Remove the anti-spammer stuff.

yeah sure, send them to me. how bigs the file ??

--
_____________________________________________________
He would be out of his depth in a carpark puddle.
invasion@crosswinds.net   www.webpoint_design.web.com
The aliens aren't among us, we are the Aliens. Long Live Planet Earth
----------------------------------------------------------------------
"Robp2001" <emails@pearls.com> wrote in message
news:8m5fi7$s60$1@gxsn.com...
> if you want some to study, i can send you some, like safe though, i got
265
> here., in encripted zip file, you want me to send you them? (not in a bad
> way)
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 'Killing one bird with two stones... (well, not everyone's a great shot !)
> Alien Spawn <invasion@crosswinds.net> wrote in message
> news:398640aa$0$11143$7f31c96c@news01.syd.optusnet.com.au...
> > yeah, and in all these years I STILL aint had a virus turn up on my
> systems
> > yet.
> >
> > Note: I'm sure this post will spur attempts to give me a virus. As I
said
> I
> > still aint seen one in the flesh unsolicited (though i have deliberately
> > asked for them to examine), go ahead. make my day,,,,punk.
> >
> > The last virus I saw unsolicited was on a TAFE machine back in 1989 "The
> > marijuhana virus/happy virus/pot virus" on a 386 dos box.
> >
> >
> > --
> > _____________________________________________________
> > He would be out of his depth in a carpark puddle.
> > invasion@crosswinds.net   www.webpoint_design.web.com
> > The aliens aren't among us, we are the Aliens. Long Live Planet Earth
>
> --------------------------------------------------------------------------
> --
> > -------------------
> >
> >
> >
> >
> >
> >
>
>

yeah sure, send them to me. how bigs the file ??

--
_____________________________________________________
He would be out of his depth in a carpark puddle.
invasion@crosswinds.net   www.webpoint_design.web.com
The aliens aren't among us, we are the Aliens. Long Live Planet Earth
----------------------------------------------------------------------
"Robp2001" <emails@pearls.com> wrote in message
news:8m5fi7$s60$1@gxsn.com...
> if you want some to study, i can send you some, like safe though, i got
265
> here., in encripted zip file, you want me to send you them? (not in a bad
> way)
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 'Killing one bird with two stones... (well, not everyone's a great shot !)
> Alien Spawn <invasion@crosswinds.net> wrote in message
> news:398640aa$0$11143$7f31c96c@news01.syd.optusnet.com.au...
> > yeah, and in all these years I STILL aint had a virus turn up on my
> systems
> > yet.
> >
> > Note: I'm sure this post will spur attempts to give me a virus. As I
said
> I
> > still aint seen one in the flesh unsolicited (though i have deliberately
> > asked for them to examine), go ahead. make my day,,,,punk.
> >
> > The last virus I saw unsolicited was on a TAFE machine back in 1989 "The
> > marijuhana virus/happy virus/pot virus" on a 386 dos box.
> >
> >
> > --
> > _____________________________________________________
> > He would be out of his depth in a carpark puddle.
> > invasion@crosswinds.net   www.webpoint_design.web.com
> > The aliens aren't among us, we are the Aliens. Long Live Planet Earth
>
> --------------------------------------------------------------------------
> --
> > -------------------
> >
> >
> >
> >
> >
> >
>
>

Negative!  This type of virus is transmitted through this type
of newsgroup.  As soon as you open a topic, it will write itself
to your IE5 temp file.  It then will go to the registry upon
opening and make the following changes:

HKCU/Identities/
{Identity}/Software/Microsoft/Outlook/Express/5.0/signatures
This is how the virus spreads by attaching to the signature
feature.  This causes all outgoing mail to be appended by the
worm. It also changes the registry key:

HKLM/Software/Microsoft/Windows/CurrentVersion/Run/cAgOu

This causes the worm to be executed each time the computer is
booted.

Removal is easy.  1) Delete file:  KAK.HTA or KAK.htm
2)Delete the above registry key:
HKLM/Software/Microsoft/Windows/CurrentVersion/Run/cAgOu

Good Luck, as you can see.  Been there, done that.


-----------------------------------------------------------

Got questions?  Get answers over the phone at Keen.com.
Up to 100 minutes free!
http://www.keen.com

Hi,

I would like to add that this virus attaches itself to your signature file in
your email and therefore everytime you send someone email, you are sending this
virus to your friends.
Unlike other viruses that you need to open an attachment, this one you do not!
All you have to do is open the email to read it.

Get rid of it asap and then to keep from getting  it again, go to the microsoft
update page and download the security patch that you need or you will just keep
getting it.
It takes advantage of a security hole in outlook express email program.

 I get this crap in my email on the average of 4-5 week. My antivirus stops it.
If you have norton, you can configure it to auto scan all your incoming email.
Also I would contact your email friends and have them all scan their computers
for this virus as well.

                      CM

Philo wrote:

> don't panic but you have the kak worm. it can be gotten rid of fairly easily
> check out  www.datafellows.com/v-descs/kak.htm
>
> or do a google search   www.google.com  for info on kak
>
> you will have to delete the files with kak in them...just follow the
> instructions...
> kak is set up to crash your machine on the first of the month at 6pm i
> believe...
> it is not a virus which will erase your harddrive or anything but you will
> want to deal with it right away.
> Philo