Instructions on How to Remove KAK Virus.

Written by: Khristopher Wall Updated by: Jason Cook

We need to remove the preview pane, when you are reading messages in Outlook Express. To prevent infecting your computer again.

STEP 1)		Startup Outlook Express
STEP 2)		Click view
STEP 3)		Click layout
STEP 4)		Under Preview Pane, Uncheck Preview Pane
STEP 5)		Click OK

Now we need to check your messages for the KAK Virus.

STEP 1)		Click on the Inbox folder
STEP 2)		Right-Click (i.e. clicking on the right mouse button) on the message
STEP 3)		Click on Properties
STEP 4)		Click on Details Tab
STEP 5)		Click on Message Source Button near the bottom of the window
STEP 6)		Scroll to the end of the message. Look for anything that says KAK in it. if it says KAK, then this message is infected and you will have to delete it. If it DOES NOT say KAK, the message is OK.
STEP 7)		Click the X in upper right hand corner to close this message source window
STEP 8)		Click Cancel to close this window
STEP 9)		To delete an infected message press the delete key on the keyboard
STEP 10)		You will have to go through each message and check it out. If you don't, you will end up infecting your computer again.

To remove the KAK Virus, do the following steps.

STEP 1)		Click start
STEP 2)		Click programs
STEP 3)		Click MS-DOS Prompt and it should now be a black screen with c:\windows> prompt
STEP 4)		Type in the following command: attrib -h kak.*
STEP 5)		Type in the following command: del kak.*
STEP 6)		Type in the following command: cd system
STEP 7)		Type in the following command: *attrib -h .hta**
STEP 8)		Type in the following command: *del .hta**
STEP 9)		Type in the following command: cd "\windows\start menu\programs\startup"
STEP 10)		Type in the following command: *attrib -h .hta**
STEP 11)		Type in the following command: *del .hta**
STEP 12)		Type in the following command: cd\
STEP 13)		Type in the following command: attrib -h ae.kak
STEP 14)		Type in the following command: move /y ae.kak autoexec.bat
STEP 15)		Type in the following command: exit
STEP 16)		Click start
STEP 17)		Click run
STEP 18)		Type in the following command: regedit
STEP 19)		Click OK
STEP 20)		Double-Click hkey_local_machine
STEP 21)		Double-Click software
STEP 22)		Double-Click microsoft
STEP 23)		Double-Click windows
STEP 24)		Double-Click currentversion
STEP 25)		Double-Click run
STEP 26)		On the right side is there an entry that says "cAgOu"? If yes highlight "cAgOu" and hit delete key on keyboard. Click X in upper right hand corner