[Resolved] KAK startup group/WATCH startup group????

[SavvyLady]

Kak Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\KAK.HTA
Watch Startup Group C:\WINDOWS\TWAIN_32\CIS600X\WATCH.exe
MSMSGS Registry (Per-User Run) "C:\Program Files\Messenger\msmsgs.exe" /background
AIM Registry (Per-User Run) C:\PROGRAM FILES\INSTANT MESSENGER\aim.exe -cnetwait.odl
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
StillImageMonitor Registry (Machine Run) C:\WINDOWS\SYSTEM\STIMON.EXE
SystemTray Registry (Machine Run) SysTray.Exe
LexmarkPrinTray Registry (Machine Run) PrinTray.exe
LoadQM Registry (Machine Run) loadqm.exe
AVG_CC Registry (Machine Run) C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
EnsoniqMixer Registry (Machine Run) starter.exe
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Norton CrashGuard Monitor Registry (Machine Run) "C:\PROGRAM FILES\NORTON CRASHGUARD\CGMenu.EXE"
Avgserv9.exe Registry (Machine Service) C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent Registry (Machine Service) mstask.exe


Im trying to help a local friend who is here in TSG.... I can't help her because I can't browse ...cable is acting up.

The above is her msinfo32 list
Does she have the KAK Worm or a WATCH group ???

 

[TonyKlein]

She has the KAK worm for sure: http://www.pchell.com/internet/kakworm.shtml

Watch belongs to her scanner.

Grtz.

 

[TonyKlein]

Well, it's sitting there in startup, there's no denying that.

Follow the instructions in the article. There's also a link to a KAK cleaner.

Good luck,

 

[SavvyLady]

thanks Tony... I knew you had a fixer

 

[Sweet_Pepper]

Thank you Tony, I have follow your advice. I have gotten rid of the kak worm.. Savvy said you would know what to do.

 

[TonyKlein]

Hi Sweet_Pepper,

You're welcome.

In all fairness, Savvy was really the one who discovered it in your startups and therefore deserves a large part of the credit.

Good luck,