SOUTH-AFRICA-L Archives

Archiver > SOUTH-AFRICA > 2000-12 > 0975792577


From: "JenGen" <>
Subject: Re: K*K VirusI
Date: Sat, 2 Dec 2000 14:29:37 -0700
References: <01c05b9a$a894f740$147e19ac@moureen.jcci.co.za>


Maureen suggested that a virus or worm can only be transmitted as an
attachment. After being infected with the "kak" virus, I went through the
removal instructions provided at the following Symantec site:

http://service1.symantec.com/SUPPORT/nav.nsf/docid/2000020318071406&src=hot

and discovered this little tidbit at the bottom of their page:

"NOTE: As noted previously, Wscript.KakWorm is spread as part of an email
message -- not as an attachment. If, however, your email program -- or the
email server that handles the message-- is not set up for or capable of
handling HTML encoded messages, the program will convert the encoded message
to an attachement. This attachement usually has a name sucha s Att1.htm.
If you open the attachement, it can have the same effect as would receiving
the email message with the worm imbedded."

So, this virus (among others) can be spread as part of an email, not
necessarily as an attachment. This virus shows itself by deleting your
Signatures in Microsoft Outlook and Outlook Express. If you use either of
these programs for your email, I would highly recommend visiting the site
noted above and following their instructions (even if you don't use Norton
Antivirus as your virus scanner). I found their instructions easy to follow
and links reliable. As always, it is a really good idea to update your virus
definitions frequently -- someone is always comming up with a new virus....

FYI.

Jennifer Wescoatt Jensen


----- Original Message -----
From: JCCI\MAUREEN BRADY <>
To: <>
Sent: Friday, December 01, 2000 6:28 AM
Subject: Re: K*K VirusI


> Hi Bonnie
> As far as I know, you can only spread a virus or worm in an attachment,
not
> in a plain email, so I don't think you have to worry about having sent it
to
> the List.
> Regards
> Maureen
> Johannesburg
>
> -----Original Message-----
> From: Bonnie Sydow <>
> To: <>
> Date: 30 November 2000 11:14
> Subject: K*K VirusI
>
>
> >Hello Fellow Researchers
> >
> >I had a little bother with my PC in that it became infected by the K*K
> virus
> >despite the fact that I have the McAfee Vshield program installed. So
> >far it does not appear to have caused any major damage - the loss of my
> >signature in Outlook Express.
> >I only hope I caught it before sending it on to other folks!
> >
> >I apologise for any inconvenience caused if I did unwittingly pass it on.
> >
> >Genforum lede, ek vertrou julle aanvaar ook my apologie!
> >Groete Uit Die KAAP
> >Andrew (Bonnie) Sydow
> >
> >
> >==== SOUTH-AFRICA Mailing List ====
> >***********************************************************************
> >To find out about South African Research and how to do it please visit:
> >http://home.global.co.za/~mercon/
> >
> >
>
> ______________________________

This thread: