SysOpt Forums

System Optimization and PC Performance

[ Home | News | Features | User Reviews | Overclocking | Benchmarks | About Us | Forum FAQ

Go Back   SysOpt Forums > General Tech > Technical Support

Technical Support Have a technical problem? Can't get your PC to boot, a modem to be recognized, or drivers to install? This is the place to ask your questions.

Reply
 
Thread Tools Search this Thread Display Modes
Old 05-03-2000, 02:57 AM   #1
Rookie
Member
 
Join Date: Jun 1999
Location: Baltimore MD USA
Posts: 188
Lightbulb What does the .kak worm do?

Am getting phantom (or otherwise wierd) *W* drives showing up on the right pane of windows explorer. And the shortcut i put on the desktop changes to a *My Computer* icon and if you right click on it and choose properties- it points to a funny colored pinwheel icon labeled iexplor.exe

Is this a Kak variant? it is a trojan isnt it?
This is on My Dad's machine but I was netbui networked with him and its on one of my machines as well.
My Dad belongs to a opt-in mailing list- kinda like a multilevel marketing...well no thats exactly what it is..mailing list for people wanting to make a killing on the web.
One of the mails sent to the list had a kak worm in it according to Norton 2000 av.
Norton quaratined it and i deleted it but there is massive damage spreading all over certain sysem files.
A reformat and reinstall went ok, but when I tried to add his mail client (eudora) and the outlook mail it seems that the fresh install is infected again!

From what I read the Kak variety of virus (or worm?) is a boot sector virus. Is that accurate?
I put the infected hdd in thinking it was slaved and forgot it was in the primary master slot and it booted- Maybe thats when it reinfected the new drive?
So... I did fdisk/mbr 2 times (also doing sys c )on each of the drives (bad one and new one) and thru away the floppy after each one- not wanting to take any chances.
Norton gives both a clean bill of health, but the W drives and the iexplr.exe still come back.
I ripped most of what i could find out of the registry and system folders and reinstalled. But they still come back.
Does my Dad have to lose all of his mail/contacts?
Any help would be much appreciated.
(needless to say the list mail now goes to web based mail clients....most of the opt in people are just harvesting emails)

[This message has been edited by Rookie (edited 05-03-2000).]
Rookie is offline   Reply With Quote
Old 05-03-2000, 06:13 AM   #2
UncaDanno
Member
 
Join Date: Dec 1999
Location: Midland, NC, USA
Posts: 92
Lightbulb

Try this:

Type www.infoseek.com into the Address area of your browser. That will bring up the Infoseek search page.
Now, in the text box at the top, type in kak worm and press enter. That will bring up sites with references to "kak" and "worm".

The first is Symantec's writeup of the .kak worm. It'll tell you all about it.
UncaDanno is offline   Reply With Quote
Old 05-03-2000, 10:14 AM   #3
Rookie
Member
 
Join Date: Jun 1999
Location: Baltimore MD USA
Posts: 188
Lightbulb

Thanks uncadanno, that tells me about the kak part. From what I read there at symantec, I may still have a trojan, with the iexplore stuff...?
Rookie is offline   Reply With Quote
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 02:17 PM.


  • Weekly CPU Prices for February 5, 2010
  • Weekly CPU Prices for January 29, 2010
  • Weekly CPU Prices for January 22, 2010
  • Weekly CPU Prices for January 15, 2010
  • Weekly CPU Prices for January 8, 2010
  • Weekly CPU Prices for December 31, 2009
  • Weekly CPU Prices for December 25, 2009
  • Weekly CPU Prices for December 18, 2009




    IBM Power7: Big Blue's Answer to Oracle, Intel
    Chip Stocks Stabilize as Market Fall Continues
    Mozilla Firefox to Drop Support of Mac OS X 10.4
    SAP's CEO Ouster Latest Indication of Troubles
    Oracle Adds SOA Depth with AmberPoint Deal
    Cisco Aims to Simplify Datacenter Migrations
    Google Earns High Marks for Super Bowl Ad
    Investors Unimpressed With NetSuite's Q4
    Facebook Says Adios to Microsoft Banner Ads
    Why Red Hat Had to Pull the Plug on Exchange


  • Acceptable Use Policy


    The Network for Technology Professionals

    Search:

    About Internet.com

    Legal Notices, Licensing, Permissions, Privacy Policy.
    Advertise | Newsletters | E-mail Offers


    Powered by vBulletin® Version 3.7.3
    Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
    Copyright 2002 Jupitermedia Corporation