Kak Worm

Information about Kak worm:

                     Wscript/Kak is a worm that exploits security vulnerabilities in Microsoft Internet Explorer and Microsoft Outlook in a way similar to Bubbleboy worm. It will ONLY infect PCs running Windows 98 with Internet Explorer 5 and Outlook or Outlook Express.

                     When viewing the e-mail in OUTLOOK or OUTLOOK EXPRESS, the VBScript code in it will create "KAK.HTA" in startup directory. This file will be run at next startup, it will create KAK.HTM in windows folder and and changes the Microsoft Outlook Express registry settings so that the KAK.HTM is automatically included in every outgoing message as a signature. The KAK.HTA also changes the Windows registry that it includes the name of the worm file.

                     On the 1st of any month after 5 p.m. the worm displays the message "Kagou-Anti_Kro$oft says not today" and runs Windows shutdown

Removing Kak worm from your system:

                     Fire has incorporated Kak worm into its virus signature file, with the aim of helping users affected by this Worm attack to detect and eliminate it from their systems. Fire anti-virus users can update this signature file from our web site.

                    Microsoft have released a patch to deal with this security problem which we strongly recommend users install. For further information and to download the patch please view http://www.microsoft.com/TechNet/IE/tools/scrpteye.asp. You should install this security patch after deleting the Kak infected files. Otherwise it will catch you again.

                     You can check the system manually. This worm creates the file "KAK.HTA" in the "C:\windows\start menu\programs\startup" folder. If the file is present in the folder, your PC is infected with this virus. A free utility is available to detect and clean this virus in Download Center. This Free download utility detects and removes Wscript.Kakworm only. To remove the variants of this worm, please use our FireLite version or Windows version of Fire.

                     A free download of FireLite [ 1100KB ] version is available to detect all viruses. If you find any virus, use registered windows version of Fire to remove. Fire registered version removes Kak worm and its variants permanently. To get the registered version of Fire call us at 044-28170440 or mail to service@fireav.com or purchase Fire online using