HW: Hawkestra - re Kakworm virus

[J D]

To Dave Berry (and anybody else who's interested)

When I booted my PC this AM, I got a message which escapes my memory now,
although I'm sure it mentioned an HTA file.
"Strange", I thought, time for an anti-virus update.
Did so, and ran against C:
2 files infected with VBS/Kakworm.
To delete infected files, undo updates to Autoexec, E-mail signatures and to
protect against further damage is a detailed boring process which I've now
forgotten.
www.sophos.com is a good starting point which details use of Regedit etc to
fix problem.
Consequence of staying infected, is message on 1st day of each month along
the lines of "Kakworm says NOT TODAY" followed by PC power down.
The only thing I used my PC for over the last couple of days was E-mails
(99% came from BOC/L) so chances are that was the source.
Sorry for boring, long winded non-HW related ramblings, but hopefully it
could help someone out of a potential hole!
Jez


----- Original Message -----
From: Dave Berry <daveb at TARDIS.ED.AC.UK>
To: <BOC-L at LISTSERV.SPC.EDU>
Sent: Wednesday, October 25, 2000 10:27 PM
Subject: Re: HW: Hawkestra


> At 21:52 25/10/00, J D wrote:
> >
> > Anybody else pick up Kakworm virus from these E-mails yesterday?
> > Easy to fix - if you don't then 1st Nov should prove interesting for
you!
>
>
>
> How would we know?  How do we fix it?  What happens if we don't?
>