Apology - Virus (From different Machine)
- To: "'pumpkins@mallorn.com'"
- Subject: Apology - Virus (From different Machine)
- From: B* D*
- Date: Mon, 2 Oct 2000 15:15:37 -0500
- List-Archive: <http://www.mallorn.com/lists/pumpkins/> (Web Archive)
- Sensitivity: Company-Confidential
Sorry folks. I had picked up this virus about 3 weeks ago from a different
list and I had cleaned it out - so I thought. Symantec's cleaning program
for this virus indicated that I was clean but when I checked the registry
and hidden files it was back. Should be clean now as I manually looked for
everything, but to be safe until I do some testing I will apologize from a
different system.
If you did get it check out:
http://www.symantec.com/avcenter/venc/data/wscript.kakworm.fix.html for
details on cleaning it out. On top of what they indicate look for the
following files and remove them if they are still present (they maybe
hidden):
c:\windows\kak.htm (kak.htm or kak.hta or kak.htm)
c:\windows\system\(name).hta (in my case it was 136113E0.hta)
c:\windows\Start Menu\Programs\StartUp\ AE.KAK or KAK.HTA or KAK.HTM
There is also a patch that should prevent this from happening in the future
- I didn't see the patch the first time.
Daniel Bezte
---------------------------------------------------------------------
Pumpkin-growing FAQ: http://www.mallorn.com/lists/pumpkins/search.cgi
To sign-off this list, send email to majordomo@mallorn.com with the
message text UNSUBSCRIBE PUMPKINS
