[NHCOLL-L:529] RE: Virus warning about e-mail to this group

c-mayer2 at uiuc.edu c-mayer2 at uiuc.edu
Wed Apr 19 15:55:33 EDT 2000


It's a worm - see:
http://www.symantec.com/avcenter/venc/data/wscript.kakworm.html

 From Symantec's page:
Wscript.KakWorm
   VBS.KakWorm spreads using Microsoft Outlook Express. It attaches 
itself to all outgoing messages via the Signature feature of Outlook 
Express and Internet Explorer newsgroup reader.

   The worm utilizes a known Microsoft Outlook Express security hole 
so that a viral file is created on the system without having to run 
any attachment. Simply reading the received email message will cause 
the virus to be placed on the system.

   Microsoft has patched this security hole. The patch is available 
from Microsoft's website. If you have a patched version of Outlook 
Express, this worm will not work automatically.

    Also known as: VBS.Kak.Worm, Kagou-Anti-Krosoft


More information about the Nhcoll-l mailing list