Q-C Online support pages
Technical support article

About the KAK Worm Virus



VBS.KakWorm spreads using Microsoft Outlook Express. It attaches itself to all outgoing messages via the Signature feature of Outlook Express and Internet Explorer newsgroup reader. The worm utilizes a known Microsoft Outlook Express security hole so that a viral file is created on the system without having to run any attachment. Microsoft has patched this security hole. The patch is available from Microsoft's website. If you have a patched version of Outlook Express, this worm will not work automatically.

Simply reading the received email message will cause the virus to be placed on the system. Even if you receive an infected message, you cannot be affected unless you have an Internet Explorer based product installed. The worm arrives embedded in an email message as the message HTML signature. The recipient of the message cannot see any visible symptoms as there is no displayable text in the signature. If the user opens or previews the infected email message the worm drops file KAK.HTA into the Windows start-up folder. KAK.HTA runs the next time Windows is started, creates the C:\WINDOWS\KAK.HTM file and changes the Microsoft Outlook Express registry settings so that the KAK.HTM is automatically included in every outgoing message as a signature. The KAK.HTA also changes the Windows registry that it includes the name of the worm file.

Download the Wscript.Kakworm fix

Download the Wscript.Kakworm.B fix

For more information on virus updates and anti-virus software, visit our Virus Information section.


Local events heading








  Today is Tuesday, July 29, the 210th day of 2014. There are 155 days left in the year.

1864 -- 150 years ago: Col. H.F. Sickless informs us that there will be new organization of troops in this state under the call for more men.
1889 -- 125 years ago: James Normoyle arrived home after graduating from West Point with honors in the class of 1889. He was to report to Fort Brady, Mich., as second lieutenant in the 23rd Infantry.
1914 -- 100 years ago: Austria Hungary declared war on Serbia. Germany and Austria refused an invitation of Sir Edward Grey to join Great Britain at a mediation conference.
1939 -- 75 years ago: Dr. William Mayo, the last of the three famous Mayo brother surgeons, died at the age of 78.
1964 -- 50 years ago: One of the biggest horse shows of the season was held yesterday at Hillandale Arena on Knoxville Road under the sponsorship of the Illowa Horsemen's Club.
1989 -- 25 years ago: Davenport is like a gigantic carnival this weekend with the Bix Arts Fest taking over 12 square blocks of the downtown area. A festive atmosphere prevailed Friday as thousands of people turned out to sample what the Arts Fest has to offer.








(More History)