Re: VIRUS-Do not open Bob Weisel Retirement email

["John Danahy" <JDANAHY@turbonet.com>]

I was infected, reading Sue's email before Lou's  Bummer!!

I was able to find the kak file and delete it but I was not able to find the
registry key that might cause my computer to shut down at 5pm this evening.
does anyone know how to go about doing this?

the key is labeled
hkml/software/microsoft/windows/currentversion/run/cAgOu

John
John and Laurie Danahy
jdanahy@turbonet.com
----- Original Message -----
From: Lou Sternberg <loustern@primenet.com>
To: <vision2020@moscow.com>
Sent: Thursday, June 01, 2000 5:09 AM
Subject: VIRUS-Do not open Bob Weisel Retirement email


> My Norton anti-virus software identified a virus in Sue Hovey's posting
> last night entitled "Bob Weisel Retirement--Reprise."  The virus is named
> WScript.KakWorm.
>
> I would recommend that you not read the email.
>
> Here is what Symantec has to say about the virus:
>
> Wscript.KakWorm
> VBS.KakWorm spreads using Microsoft Outlook Express. It attaches itself to
> all outgoing messages via the Signature feature of Outlook Express and
> Internet Explorer newsgroup reader.
>
> The worm utilizes a known Microsoft Outlook Express security hole so that
a
> viral file is created on the system without having to run any attachment.
> Simply reading the received email message will cause the virus to be
placed
> on the system.
>
> Microsoft has patched this security hole. The patch is available from
> Microsoft's website. If you have a patched version of Outlook Express,
this
> worm will not work automatically.
>
> Also known as: VBS.Kak.Worm, Kagou-Anti-Krosoft
>
> Category: WORM
>
> Infection length: 4116 Bytes
>
> Virus definitions: December 30, 1999
>
>
>
>
>
>
>
>
> Lou
>
>
>
>
> Lou Sternberg, Ph.D.             (208)343-0555
> 5017 Bel Air                     loustern@primenet.com
> Boise ID 83705-2777
>