The Kak Worm is a Win32 email worm that comes as embedded script within an email message. It will not deliberately destroy or do any damage to the files in your hard disk but will shut down your computer on certain days. It will add itself to email messages sent out.

• Edit Autoexec.Bat and remove the following lines:
  @echo off>c:\windows\STARTM~1\Programs\Startup\kak.hta
  del c:\windows\STARTM~1\Programs\Startup\kak.hta
  
  
• Run Vbuster.Exe and get it to delete the collowing files:
  c:\windows\kak.htm
  c:\windows\system\xxxxxxxx.hta (where xxxxxxxx is a number)
  c:\windows\Start Menu\Programs\StartUp\kak.hta
  
  
  
• Run Regedit.Exe from Windows and do a search for:
  cAgOu
  
  
• Once cAgOu is found delete the line with the key.

Return Home