The Hindu Business Line : Script errors

I have a problem whenever I open Outlook Express (Windows 98) version. On opening any of the local folders — be it Sent Items, Deleted Items or Drafts — and while viewing its contents, an `Internet Explorer Script Error' dialog box appears with the following message: "An error has occurred in this script on this page". The line and the character where the error has occurred are also mentioned. Mostly, the error is: Type mismatch `KJ_start'. This is followed by Code and URL and a question: "Do you want to continue running scripts on this page?" Clicking the "Yes" or "No" button any number of times does not help. The dialog box keeps on re-appearing, which is annoyingCould you please suggest a solution?

There is another problem: On getting connected to the Internet (IE 6.00 version browser) and after browsing the Net for sometime, I am unable to disconnect the Internet connection. Right-clicking the Internet icon near the clock on the task bar and clicking the disconnect button does not help. Please suggest a solution.

S. Dorai Raj

This is a virus that Symantec calls HTML.Redlof.A. It is also known by the following names by other anti-virus software vendors, VBS/Redlof@M, VBS.Redlof, VBS_REDLOF.A and VBS/Redlof-A.

It copies itself to the system directory c:\windows or c:\winnt as kernal.dll or kernal32.dll. It makes the necessary entries in the system registry to start the virus at system start-up. Once it is up, it searches all disk drives and subdirectories for files with the following extensions: VBS, HTML, HTM, ASP, PHP, JSP, HTT. And it appends an encrypted version of itself onto host files and adds an additional function called KJ_start(). You get the above-mentioned error when this function is called.

It also attempts to spread through e-mail messages by infecting the Microsoft Outlook Express stationery files. All the mails created by the user of the infected computer are composed with the infected stationery.

To remove this virus, please update the virus definition to the latest and scan the system. Then do the following:

Open regedit and locate the following entries and delete them

Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wind-

ows\CurrentVersion\Run and delete the entry with value "Kernel32"

Go to HKEY_CURRENT_USER\Identities\[Default Use ID]\Soft ware\Microsoft\Outlook Express\[Outlook Version].0\Mail. Delete the values "Compose Use Stationery Stationery Name Wide Stationery Name"

Go to HKEY_CURRENT_USER\Software\Microsoft\Off-

ice\9.0\Outlook\Options\Mail. Delete the value "EditorPreference"

Delete the following entries also

HKEY_CLASSES_ROOT\dllFile\Shell

HKEY_CLASSES_ROOT\dllFile\ShellEx

HKEY_CLASSES_ROOT\dllFile\ScriptEngine

HKEY_CLASSES_ROOT\dllFile\ScriptHostEncode

Solutions by G. Rajah

Article E-Mail :: Comment :: Syndication

Stories in this Section
Goodbye and keep out

Another line to the railways

Which four would it be?