Removing the KAK Virus

We need to remove the preview pane, when you are reading messages in Outlook Express.
To prevent infecting your computer again.
startup Outlook Express
click view
click layout
Under Preview Pane
Uncheck Preview Pane
Click Okay
Now we need to check your messages for the kak virus.
Click on the Inbox folder
Right-Click (i.e. clicking on the right mouse button) on the message
Click on Properties
Click on Details Tab
Click on Message Source Button near the bottom of the window
Scroll to the end of the message.  Look for anything that says KAK in it.
if it says KAK, then this message is infected and you will have to delete it.
If it DOES NOT say KaK, the message is OK.
Click the X in upper right hand corner to close this message source window
Click Cancel to close this window
To delete an infected message press the delete key on the keyboard
You will have to go through each message and check it out.  If you don't, you will 
end up infecting your computer again.

click start
click programs
click MS-DOS Prompt
It should now be a black screen with c:\windows> prompt

type in the following command: attrib -h kak.*
type in the following command: del kak.*
type in the following command: cd system
type in the following command: attrib -h *.hta
type in the following command: del *.hta
type in the following command: cd "\windows\start menu\programs\startup"
type in the following command: attrib -h *.hta
type in the following command: del *.hta
type in the following command: cd\
type in the following command: attrib -h ae.kak
type in the following command: move /y ae.kak autoexec.bat
type in the following command: exit

click start
click run
type in the following command: regedit
click okay
double click hkey_local_machine
double click software
double click microsoft
double click windows
double click currentversion
double click run
On the right side is there an entry that says "cAgOu"?
If yes highlight "cAgOu" and hit delete key on keyboard.
click X in upper right hand corner

Back to Virus page

Created by: Khris Wall Updated by: Jason Cook