//flex table opened by JP

Click to See Complete Forum and Search --> : READ IF YOU USE HOTMAIL EMAIL!!


GroundZero3
02-26-2000, 08:51 AM
Ah right folks this is not no joke on January 26, 2000 at 11:26 am Et I was in hotmail and when i clickked on an email and my norton virus protection popped up. It said something about the web address having the virus called wscript.kat virus. im not playing around i sent and email to hotmail telling them about my findings and all they do is send me stuiped automatice replys. Just giving you all a heads up. Update your virus protection
Gz3

OSPA
02-26-2000, 09:31 AM
Who sent the mail?

OSPA
02-26-2000, 09:40 AM
I didn't find any viruses by that name at www.datafellows.com (http://www.datafellows.com) but there was a virus called Wscript.KakWorm. It was the closest.
The page displayed the following info:

F-Secure Virus Information Pages


NAME:
Kak
ALIAS:
Wscript.KakWorm, KakWorm


WScript.KakWorm is a worm that attaches itself to every
email sent from the infected system. It is written with JavaScript and it works on both
English and French versions of Windows 95/98 if Outlook Express 5 is installed.

The worm uses a known security vulnerability in Outlook Express. When an user
receives an infected email message, the worm creates a file "kak.hta" to the Windows
Startup directory.

When the system is restarted, the worm activates. It replaces "c:\autoexec.bat" with a
batch file that deletes the worm from the Startup directory. The original "autoexec.bat" is
copied to "C:\AE.KAK".

It also modifies the message signature settings of Outlook Express 5.0 replacing the
current signature with an infected file, "C:\Windows\kak.htm".

Therefore every message sent with Outlook Express after that will contain the worm.

Next it modifies the Windows registry in a such way that it will be executed in every
system startup. In first day of each month if the number of hours is more than 17
(5:00pm), the worm will show an alert box with the following text:

Kagou-Anit-Kro$oft say not today!

GroundZero3
02-26-2000, 10:23 AM
I don't have outlook express 5 on my computer
Tho
Gz3