Results 1 to 9 of 9

Thread: kak.hta

  1. Apr 29th, 2001, 07:54 AM #1
    <! --
    <! -- is offline

    Thread Starter
    New Member
    Join Date
    Apr 2001
    Posts
    3
    It's a worm called Kak. I've had it before, it managed to infect the entire network. Now we have precautions!! (i.e. firewall/A-V). It attaches itself to e-mails, so anyone you have sent a mail to could be a potential victim. It also randomly appears to dissallow loading of windows on certain days. It pops up saying "Not today" or something like that then shuts down.

    It's not particularly dangerous, just a pain in the arse. Get a A-V to clear it out. Make sure also to remove the signature section from Outlook.
    Reply With Quote Reply With Quote
  2. Apr 29th, 2001, 08:25 AM #2
    ricmitch_uk
    Guest
    I've had it too. I cleaned mine manually though. It's even nice enough to create a backup of the files it uses!
    I got this off the net when I got it.
    F-Secure Anti-Virus detects the worm. When the worm has been detected, the user should delete the following files, if they exist:


    C:\Windows\kak.htm
    C:\Windows\System\(filename).hta
    where (filename) is a variable, and it changes from one system
    to another


    C:\Windows\Start Menu\Programs\Startup\kak.hta
    [French only] C:\Windows\Menu Demarrer\Programmes\Demarrage\kak.hta

    The "autoexec.bat" file can be restored by renaming "C:\AE.KAK" to "C:\autoexec.bat".

    Kak uses a known security hole in Microsoft Outlook Express to create the local HTA file.
    Mine was an unusual case, because I got infected twice, that complicated things a bit. But I'm clean now.
    HTH
    Reply With Quote Reply With Quote
  3. Apr 29th, 2001, 12:17 PM #3
    Xenonic_Rob
    Xenonic_Rob is offline
    Addicted Member Xenonic_Rob's Avatar
    Join Date
    Jun 2000
    Location
    England, UK
    Posts
    213
    Yip - it's a pain in the whatever the Kak virus... grrr to it.

    Rob Wright
    E-mail: [email protected]
    Website: http://www.xenonic.com
    The First Member of Honeybee's Club
    Favourite words: Zugzwang and Empiric
    Reply With Quote Reply With Quote
  4. Apr 29th, 2001, 02:18 PM #4
    Mark Sreeves
    Mark Sreeves is offline
    Frenzied Member Mark Sreeves's Avatar
    Join Date
    Nov 1999
    Location
    UK
    Posts
    1,845
    I'm running McAfee VSheild 4.0.3 with definitions downloaded from McAfee website 2 days ago, how come this hasn't picked it up?
    Mark
    -------------------
    Reply With Quote Reply With Quote
  6. Apr 29th, 2001, 02:23 PM #5
    chrisjk
    chrisjk is offline
    PowerPoster
    Join Date
    Jul 1999
    Posts
    5,923
    hmm, odd. I'm using VShield with definitions I downloaded ages ago, and it picked it up ages ago with the original virus dat files from over 1 year ago!
    Reply With Quote Reply With Quote
  7. Apr 29th, 2001, 02:24 PM #6
    denniswrenn
    Guest
    Because McAffee sucks monkey balls!

    I got a program from a public FTP(which I never ran, thank God), which had a virus in it... I had the latest McAffee defs and it didn't say anything about it.... a friend with norton(which I am upgrading too as soon as I can afford the 2001 upgrade) got the file from me and it immediatly alerted him....

    never trust McAffee...


    But your case is wierd, because when I had kak.hta, McAffee with defs from february 2000 recognized it.
    Reply With Quote Reply With Quote
  8. Apr 29th, 2001, 02:26 PM #7
    chrisjk
    chrisjk is offline
    PowerPoster
    Join Date
    Jul 1999
    Posts
    5,923
    ah, I've got Norton firewall and together they do a good job.
    Reply With Quote Reply With Quote
  9. Apr 29th, 2001, 10:08 PM #8
    Active
    Active is offline
    Addicted Member Active's Avatar
    Join Date
    Jan 2001
    Location
    Lat: 13° 4' 46" N, Long: 80° 15' 20" E
    Posts
    209
    HTA - Html Application
    If you can't beat your computer at chess, try kickboxing !!!
    [Download Tag Editing Tools.]
    Reply With Quote Reply With Quote
  11. Apr 30th, 2001, 07:14 AM #9
    kedaman
    kedaman is offline
    transcendental analytic kedaman's Avatar
    Join Date
    Mar 2000
    Location
    0x002F2EA8
    Posts
    7,221
    29
    Use
    writing software in C++ is like driving rivets into steel beam with a toothpick.
    writing haskell makes your life easier:
    reverse (p (6*9)) where p x|x==0=""|True=chr (48+z): p y where (y,z)=divMod x 13
    To throw away OOP for low level languages is myopia, to keep OOP is hyperopia. To throw away OOP for a high level language is insight.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width