Home > General > Wscript.kakworm


Delete worm-infected files from Quarantine. Symantec has also created an interactive tutorial to help you get rid of this worm. The Registry Editor opens. One of the following three messages will appear after you click Remove: "Your computer is not infected." (Your system is safe, and you do not need to do anything.) "Your computer have a peek here

The System Configuration Utility dialog box appears. Click Advanced on the General tab. And delete all emails in your sent and deleted folders. To get rid of Wscript.Kakworm Removal Tool, the first step is to install it, scan your computer, and remove the threat.

Exit the Registry editor. Simply reading the received email message causes the virus to be placed on the system. To remove the worm entry from the registry: CAUTION: We strongly recommend that you back up the system registry before you make any changes. Microsoft has patched this security hole.

  • The Run dialog box appears.
  • Advertisement Recent Posts Windows Automatic recovery?
  • If you open the attachment, it can have the same effect as if you received the email message with the worm embedded.
  • Additional precautions that you can take: Some threats, such as this one, use the VBScript computer language to run.
  • Delete or remark out any lines with entries that refer to C:\Windows\Start Menu\Programs\StartUp\kak.hta.
  • The worm adds these commands to AUTOEXEC.BAT: @ECHO off C:\Windows\Start Menu\Programs\StartUp\kak.hta DEL C:\Windows\Start Menu\Programs\StartUp\kak.hta References[edit] ^ "Kak Worm - An Internet Virus by Mayur Kamat".

Restart the computer. Step 10 Type a file name to backup the registry in the File Name text box of the Save As dialog box, and then click the Save button. Click the + in front of 'Identities'. Simply visiting a compromised Web site can cause infection if certain browser vulnerabilities are not patched.

By using this site, you agree to the Terms of Use and Privacy Policy. Close the 'Find:All Files' window. That virus automatically attatches itself to all outgoing emails. [This message has been edited by Kento (edited 12-28-2000).] Kento, Dec 28, 2000 #3 Darlene Thread Starter Joined: Dec 28, 2000 The next time that you download mail, you will have all of the previous message including those infected with Wscript.KakWorm.

These services are avenues of attack. Press Enter after each one. Click 'Hide' if you get an Outlook Express error message. Close Outlook Express.

If you are using Norton AntiVirus 2001, a free program update that includes Script Blocking is available. The removal procedures are different. Occasionally I will receive a email I sent through Netscape saying it has a virus on it. edit c:\autoexec.bat The MS-DOS Editor opens.

Highlight and delete the following lines from the autoexec.bat file: '@echo off>C:\Windows\STARTM~1\Programs\StartUp\kak.hta del C:\Windows\STARTM~1\Programs\StartUp\kak.hta' Select 'Save' from the 'File' menu. Select each file in the results pane, press Delete, and then click Yes to confirm. Not to familiar with that part of the computer yet. If these instructions do not remove the virus from your system, then 4Help recommends that you contact your computer vendor.

If you see the message, "Edit was unable to find a match, " click OK and then click Cancel. The removal procedures are different. Click 'Find Now'. While computers running either unpatched Microsoft Outlook or Outlook Express can be infected, only Outlook Express can automatically spread the infection.

NOTES: This document contains information about the Wscript.KakWorm. To start the computer in MS-DOS mode: If you are using Windows 95, then follow these steps: If the computer is on, close all programs, and then, if possible, shut down Navigate to and click the following subkey: HKEY_CURRENT_USER\Identities\\Software\Microsoft\Outlook Express\5.0\Signatures NOTES: The key will be different on each computer.

It spreads using Microsoft Outlook Express.

I was using outlook for e-mails but have been using Netscape Mail now. On the Find What line, typekak and then click OK. After the file finishes downloading, follow these steps: Close all programs. Please see Solution 1 for information on how to do this.

Unless you are sure that the tool is legitimate, and that you downloaded it from the legitimate Symantec Web site, you should not run it. Select option 3 'Safe Mode' and hit 'ENTER' on the keyboard. Step 7 Click the Scan for Issues button to check for Wscript.Kakworm Removal Tool registry-related issues. Any suggestions??

That virus automatically attatches itself to all outgoing emails. [This message has been edited by Kento (edited 12-28-2000).]

Darlene, Dec 29, 2000 #5 ruzzell Joined: Dec 28, 2000 Messages: 3 Click the + in front of 'Microsoft'. Antivirus Protection Dates Initial Rapid Release version December 30, 1999 Latest Rapid Release version December 30, 1999 Initial Daily Certified version December 30, 1999 Latest Daily Certified version December 30, 1999 Click 'OK'.

It uses a security hole in Microsoft Outlook/Outlook Express that is known as "Scriptlet TypeLib," and it places a shortcut to an .hta file in the StartUp folder. Type*.kak in the Named box, and then click Find Now. I find most of the AV useless and use http://www.avp.ru/ but tick email database and all files when setting then locate the email that sent the original swear at them but Wscript.Kakworm Removal Tool is considered to be a virus, a type of malware that is designed to create havoc in your computer.

Click the + in front of 'Software'. Select the 'View' menu and select 'Layout...'. To remove the worm entry from the Autoexec.bat file: At the DOS prompt, typeedit autoexec.bat and then press Enter. Please go here for the Wscript.KakWorm.B removal tool.

Join over 733,556 other people just like you! To enable show all files: Follow these steps to make sure that Windows is set to show all files: Start Windows Explorer.