Re: V2020> Re: virus

["John Danahy" <JDANAHY@turbonet.com>]

While others may be able to speak more authoritatively than me, I got most
of my information about this virus from the Symantec web site.  There are
apparently two parts to this virus.  the first is a kak.hta file in the
windows startup folder.  The best way to find out if you are infected is to
hit your start button, find button in the start menu, pick files or folders,
and in the blank space type in kak.hta and hit find.  this searches your
hard drives for this file.
the second part is harder to find, at least for me.  It is what is known as
a register key.  This apparently sends messages to windows affecting your
computer, (i.e.: run the kak file.)  You have to delete both files to clean
the virus.
I have been routinely downloading MS security patches, so I think I am clean
as I could never find the register key.
One problem with this virus is there is no immediate consequence from being
infected, thus you may not realize, unless you search, that you've got it.
I would urge everyone to look at the Symantec web site for more help.

John

John and Laurie Danahy
jdanahy@turbonet.com
----- Original Message -----
From: LuJane Nisse, Publisher <lujane@lataheagle.com>
To: SMW Scripter [AKA MoscowSam] <MoscowSam@moscow.com>; John Danahy
<JDANAHY@turbonet.com>; Vision2020 <vision2020@moscow.com>
Sent: Friday, June 02, 2000 10:53 AM
Subject: Re: V2020> Re: virus


> I got that virus too... I got it handled with the "F-Protect" disk I got
at
> Cactus Computers. My Norton Anti-virus did not pick it up.
> Am still having an "error" however that says "kak.reg can't be loaded"...
> whatever that is.
>
> LuJane Nisse
> LatahEagle
>
> ----- Original Message -----
> From: SMW Scripter [AKA MoscowSam] <MoscowSam@moscow.com>
> To: John Danahy <JDANAHY@turbonet.com>; Vision2020 <vision2020@moscow.com>
> Sent: Friday, June 02, 2000 11:00 AM
> Subject: V2020> Re: virus
>
>
> > John D and other V2020 readers ....
> >
> > Well, I'd like some opinions or definitive statements
> > about whether this was or WAS NOT an email worm.
> >
> > My guess is that many on V2020 would not have expected
> > such and may have opened the source email, as I did.
> >
> > But no one else on V2020 has reported it on their
> > computer.
> >
> > So, John, if you "got it," why only you, or am I just
> > too dumb to know I have contracted it, if in fact I
> > have.
> >
> > Sam Scripter
> > MoscowSam@moscow.com
> >
> > ----- Original Message -----
> > From: John Danahy <JDANAHY@turbonet.com>
> > To: Vision2020 <vision2020@moscow.com>
> > Sent: Thursday, June 01, 2000 5:03 PM
> > Subject: re: virus
> >
> >
> > > well I must be clean, nuttin nasty happened.  By the way Walter, you
may
> > > have a Mac, but you also miss out on all the excitement
> > >
> > > John
> > >
> > > John and Laurie Danahy
> > > jdanahy@turbonet.com
> > >
> >
>