KAK Worm:

KaK Removal

VBS.KakWorm spreads using Microsoft Outlook Express. It attaches itself to all outgoing messages via the Signature feature
of Outlook Express and Internet Explorer newsgroup reader.
The worm utilizes a known Microsoft Outlook Express security
hole so that a viral file is created on the system without having to
run any attachment. Simply reading the received email message
will cause the virus to be placed on the system.

  • Delete the following file: KAK.HTA
  • Delete the following registry key:
  • HKLM/Software/Microsoft/Windows/
  • CurrentVersion/Run/cAgOu