BEWARE OF WSCRIPT/KAK WORM

Virus Name  : I-Worm/Kak

Alias             : Wscript.Kak, JS.Kak@mm

Virus type    : Internet worm

Threat level : Medium

Virus details :

                     Wscript/Kak is a worm that exploits security vulnerabilities in Microsoft Internet Explorer and Microsoft Outlook in a way similar to Bubbleboy worm. It will ONLY infect PCs running Windows 98 with Internet Explorer 5 and Outlook or Outlook Express.

                     When viewing the e-mail in OUTLOOK or OUTLOOK EXPRESS, the VBScript code in it will create "KAK.HTA" in startup directory. This file will be run at next startup, it will create KAK.HTM in windows folder and and changes the Microsoft Outlook Express registry settings so that the KAK.HTM is automatically included in every outgoing message as a signature. The KAK.HTA also changes the Windows registry that it includes the name of the worm file.

                     On the 1st of any month after 5 p.m. the worm displays the message "Kagou-Anti_Kro$oft says not today" and runs Windows shutdown

How can I protect my system?

                   Solo has incorporated Kak Worm in its signature file to protect users from this worm attack. Solo antivirus registered users are already protected from this worm. Make sure that you have installed registered version of Solo Antivirus to protect your system from all virus threats.

                    Microsoft have released a patch to deal with this security problem which we strongly recommend users install. For further information and to download the patch please view http://www.microsoft.com/TechNet/IE/tools/scrpteye.asp. You should install this security patch after deleting the Kak infected files. Otherwise it will catch you again.

How to remove this worm?

                    You can check the system manually. This worm creates the file "KAK.HTA" in the "C:\windows\start menu\programs\startup" folder. If the file is present in the folder, your PC is infected with this worm.

                   If you are already infected with this worm, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove Kak Worm safely. Use the following link to Download 30 day trial version of Solo antivirus [1670 KB] to remove viruses from your computer.

                   Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VB, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

You can purchase Solo antivirus using the link