Greetings all...

I went ahead and downloaded the patch itself, as well as two small dos based
programs that "repair the damage" - two programs, because there are
currently two versions of the worm.

To download all three files, simply click here:

http://silverdata.20m.com/kak/

This will open a directory, where you can choose
1) to download all three files in zip format ( kakpatch&repair.zip)
2) to download only the patch (Outlook_Express_Q240308i.exe)
3) either of the fix files ( or both ).

To use the Outlook express patch, simply download the file and double click
on it.

To use the fix files, download and double click on the file, then select
"remove" from the popup dialog box that appears.  It will tell you that
either the "damage" was repaired or your computer was not found to be
currently infected.





----- Original Message -----
From: M. G. Devour <mdev...@eskimo.com>
To: <silver-list@eskimo.com>
Sent: Tuesday, May 15, 2001 9:05 AM
Subject: CS>About the kak worm problem...


> Hi all,
>
> Please don't despair. I'm actively working on adding a filter to the
> list software which should "break" the kakworm and similar embedded
> script based e-pathogens.
>
> Since I can see no legitimate reason for anyone to be sending an
> embedded script of any kind, I'm just going to try to strip them out of
> the messages altogether. I figure everything between <script> and
> </script> can just *go*.
>
> Inevitably, I expect that any tampering I do to the HTML code of the
> messages may break something for some people who are trying to read
> them, so I ask you all to bear with me during the debugging process.
>
> Anyone with unix, procmail, sed, or smartlist experience is welcome to
> step forward and lend a hand!!!! <he says, hopefully!>
>
> The ideal would be to strip *all* HTML out of the messages and just
> post the text, but that seems to be a rather large software project,
> requiring all sorts of detailed understanding of the present state of
> web standards *and* the proprietary violations^H^H^H extensions of
> those standards by certain companies whose initials are MS...
>
> In the meantime, if anyone can re-post instructions for filling the
> gaping security holes in Outlook Express that would be a *great* help.
>
> Be well,
>
> Mike Devour
> silver-list owner
>
> [Mike Devour, Citizen, Patriot, Libertarian]
> [mdev...@eskimo.com                        ]
> [Speaking only for myself...               ]
>
>
> --
> The silver-list is a moderated forum for discussion of colloidal silver.
>
> To join or quit silver-list or silver-digest send an e-mail message to:
> silver-list-requ...@eskimo.com  -or-  silver-digest-requ...@eskimo.com
> with the word subscribe or unsubscribe in the SUBJECT line.
>
> To post, address your message to: silver-list@eskimo.com
> Silver-list archive: http://escribe.com/health/thesilverlist/index.html
> List maintainer: Mike Devour <mdev...@eskimo.com>
>
>