Q-C Online support pages
Technical support article

About the KAK Worm Virus



VBS.KakWorm spreads using Microsoft Outlook Express. It attaches itself to all outgoing messages via the Signature feature of Outlook Express and Internet Explorer newsgroup reader. The worm utilizes a known Microsoft Outlook Express security hole so that a viral file is created on the system without having to run any attachment. Microsoft has patched this security hole. The patch is available from Microsoft's website. If you have a patched version of Outlook Express, this worm will not work automatically.

Simply reading the received email message will cause the virus to be placed on the system. Even if you receive an infected message, you cannot be affected unless you have an Internet Explorer based product installed. The worm arrives embedded in an email message as the message HTML signature. The recipient of the message cannot see any visible symptoms as there is no displayable text in the signature. If the user opens or previews the infected email message the worm drops file KAK.HTA into the Windows start-up folder. KAK.HTA runs the next time Windows is started, creates the C:\WINDOWS\KAK.HTM file and changes the Microsoft Outlook Express registry settings so that the KAK.HTM is automatically included in every outgoing message as a signature. The KAK.HTA also changes the Windows registry that it includes the name of the worm file.

Download the Wscript.Kakworm fix

Download the Wscript.Kakworm.B fix

For more information on virus updates and anti-virus software, visit our Virus Information section.


Local events heading








  Today is Friday, Aug. 1, the 213th day of 2014. There are 152 days left in the year.

1864 — 150 years ago: A mad dog was shot in Davenport after biting several other canines and snapping at several children. The police should abate this nuisance — there are about 500 dogs in this city that ought to be killed at once.
1889 — 125 years ago: Track laying operations on 2nd Avenue, stopped by the Moline-Rock Island company last spring for lack of rail, have been resumed.
1914 — 100 years ago: Bulletins allowed to come through the strong continental censorship of all war news indicated that Germany was advancing with a dash against both Russia and France.
1939 — 75 years ago: Emil J Klein, of Rock Island, was elected commander of Rock Island Post 200, American Legion.
1964 — 50 years ago: Members of the Davenport police department and their families are being invited to the department's family picnic to be held Aug. 27 at the Mississippi Valley Fairgrounds.
1989 — 25 years ago: Beginning this fall, Black Hawk College will offer a continuing education course in horseback riding at the Wright Way Equestrian Center, Moline, located just east of the Deere Administration Center.




(More History)