To all
My colleague has just passed this information to me
regarding this virus. It is real. It did not infect my PC,
however. This is a recommended solution. Please note this
is not a view of East Dorset District Council and East Dorset
District Council and the author take no responsibility for
this solution.
It apparently alters your Email signature
David Avenell
To remove the threat it is suggested to do the following:
Once Infected DO NOT REBOOT or re-log your computer.
Delete the following:
1. The lines in your Autoexec.bat
@echo off>C:\Windows\STARTM~1\Programs\StartUp\
kak.hta del C:\Windows\STARTM~1\Programs\StartUp\kak.hta
2. In the following folders
C:\Windows\START MENU\Programs\StartUp\kak.hta
C:\WINDOWS\KAK.HTA
3. In your Registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
Currentversion\Run\cAg0u = C:\WINDOWS\SYSTEM\.hta
HKEY_CURRENT _USER\Identities\<USER'S identity\Software\Microsoft\Outlook
Express\5.0\
signatures\Default Signature = 00000000
Views:
The views expressed in this electronic communication are those of the writer and are not, unless otherwise stated, the views of East Dorset District Council.
Confidentiality:
The addressee(s) of this electronic communication shall treat its contents in confidence and take all reasonable steps to ensure that the contents are not accessed or made available to any third party. No liability arising from unauthorised access to the information contained in this electronic communication whilst stored on any computer system or electronic storage media outside of its direct control shall be accepted by East Dorset District Council.
Virus checking:
Whilst all reasonable steps have been taken to ensure that this electronic communication and its attachments whether encoded, encrypted or otherwise supplied are free from computer viruses, East Dorset District Council accepts no liability in respect of any loss, cost, damage or expense suffered as a result of accessing this message or any of its attachments.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|