EE is the greatest site on the web. Then it modifies the Windows registry in such a way that it will be executed in every system startup. Finally, you are now in position to email everybody you have inadvertantly infect and send the patch on to them. Any questions, let me know. 0 Message Author Comment by:ArtG2000-05-05 Comment Utility Permalink(# a2782007) Adjusted points from 196 to 250 0 What Is Threat Intelligence?
Norton quarantied a virus called wscript.kakworm virus. 31/07/2000 Norton virus definitions are unable to clear the virus. When the worm has been detected, the user should delete the following files, if they exist: C:\Windows\kak.htm C:\Windows\System\(filename).hta where (filename) is a variable, Are you looking for the solution to your computer problem? When the worm has been detected, the user should delete the following files, if they exist: C:\Windows\kak.htm C:\Windows\System\(filename).hta where (filename) is a variable, and it changes from one system to another
Is kak.hta harmful to my computer? Reply With Quote August 9th, 2000,01:42 PM #3 RacerX66 View Profile View Forum Posts 5000 Join Date Feb 2000 Location Sewickley, PA US Posts 213 This should help you out. Join our site today to ask your question.
Now, Art, as fot MSCONFIG, what it shows you is that there is POSSIBLY still a reference to this file in the registry, system.ini, win.ini. Delete the key for the program you are trying to get rid of.Note: Make sure to have a backup of your registry before doing this as you can seriously mess up Staff Online Now TerryNet Moderator flavallee Trusted Advisor Advertisement Tech Support Guy Home Forums > Operating Systems > Earlier Versions of Windows > Home Forums Forums Quick Links Search Forums Recent Thanks Art PS actually it was you I read "Kagou-Anit" etc. 0 Message Expert Comment by:Spindocta2000-05-05 Comment Utility Permalink(# a2780972) The 9175A040.hta in your system directory is also part of
Finally, once again, do a find files for cAgOu and delete any occurances along with any .HTA file. All rights reserved. If active scripting is disabled from Outlook Express, the worm will not work. If you need more help search here there has been lots of posts about it..
If the file is located in another folder, you may have selected this path when installing the software. http://www.hardwareforums.com/startup-list/kak-hta-kak.7363/ Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.Just copy and paste the BBCode HTML Markdown MediaWiki reStructuredText code below into your site. Computer engineering other U User's choice - depends whether a user deems it necessary. Download Now White Paper: How Simulation Improves Injection Molding Challenges Creating tooling for injection molding is an expensive and complex proposition.
Newer Than: Useful Searches Recent Posts More... Again, if any reference to cAgOu or an HTA file is found, delete it. Every time I start the PC I get the window for kak.hta. Retrieved 2015-06-07.
The worm uses a known security vulnerability that is in Outlook Express. What does this mean and how can I get rid of it? These functions are part of the Windows API (Application Programming Interface).
Join the community of 500,000 technology professionals and ask your questions.
Still have a problem? An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. BleepingComputer.com will not be held responsible if changes you make cause a system failure. Another message saying "S3 Driver Memory Alloc Failed!" occasionally pops up.
I dont suggest that u get a ripped or pirate version as they come with viruses built in. In first day of each month if the number of hours is more than 17 (i.e. 6pm or later), the worm will show an alert box with the following text: This will be demonstrated using Windows 7 operating system. I'm back, had problems with the ILOVEYOU virus at work and haven't been able to find much time for EE.