{"id":766,"date":"2013-02-27T20:46:03","date_gmt":"2013-02-28T04:46:03","guid":{"rendered":"http:\/\/e-olio.com\/cknow\/cms\/?p=766"},"modified":"2013-05-07T22:19:32","modified_gmt":"2013-05-08T05:19:32","slug":"kakworm","status":"publish","type":"post","link":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html","title":{"rendered":"Kakworm"},"content":{"rendered":"<p><div class=\"simplePullQuote right\"><p><strong>Kakworm takes advantage of a security vulnerability in Microsoft&#8217;s Internet Explorer browser and Outlook Express mail program.<\/strong><\/p>\n<\/div>Kakworm (KAK) is a worm. It takes advantage of a security vulnerability in Microsoft&#8217;s Internet Explorer browser and Outlook Express mail program. A patch for this vulnerability has been published by Microsoft and should be installed (Microsoft Security Bulletin MS99-032). Non-Microsoft browsers and mail programs are not affected.<\/p>\n<p>KAK is transmitted embedded in the HTML signature to a message. Users don&#8217;t see it there because there is no displayable text (KAK is written in JavaScript).<\/p>\n<p>Users do not need to click on any attachment or perform any action for KAK to activate. All that is necessary is for the user to view an infected message in the mail preview window (or open the mail and view the message).<\/p>\n<p>Once activated, KAK saves the file KAK.HTA into the Windows Startup folder. The next time the computer is started, KAK.HTA runs and creates KAK.HTM in the Windows directory. The registry is changed so that KAK.HTM is included as a signature on all outgoing mails. This activity is controlled by a new \\AUTOEXEC.BAT file (the original file is saved to \\AE.KAK).<\/p>\n<p>After 5pm on the 1st of any month the worm displays the message &#8220;Kagou-Anti-Kro$oft says not today&#8221; and then shuts the computer off.<\/p>\n<p>KAK is based on Bubbleboy, the first worm able to spread without a user having to open an attachment.<\/p>\n<table style=\"margin: 0pt; width: 100%;\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" align=\"center\">\n<tbody>\n<tr align=\"center\">\n<td style=\"padding: 0 0 0 0;\" colspan=\"2\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png\" alt=\"Up Arrow\" width=\"16\" height=\"16\" class=\"alignnone size-full wp-image-579\" \/> <a href=\"https:\/\/www.cknow.com\/cms\/vtutor\/some-virus-threat-details.html\">Some Virus Threat Details<\/a> <img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png\" alt=\"Up Arrow\" width=\"16\" height=\"16\" class=\"alignnone size-full wp-image-579\" \/><\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 0 0 0 0;\" align=\"right\"><a href=\"https:\/\/www.cknow.com\/cms\/vtutor\/spacefiller-cavity-viruses.html\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_prior.gif\" alt=\"Prior Page\" width=\"48\" height=\"32\" class=\"alignnone size-full wp-image-578\" \/><\/a><\/td>\n<td style=\"padding: 0 0 0 0;\" align=\"left\"><a href=\"https:\/\/www.cknow.com\/cms\/vtutor\/laroux.html\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_next.gif\" alt=\"Next Page\" width=\"48\" height=\"32\" class=\"alignnone size-full wp-image-577\" \/><\/a><\/td>\n<\/tr>\n<tr>\n<td style=\"padding-right: 20px; text-align: right; width: 50%;\"><a href=\"https:\/\/www.cknow.com\/cms\/vtutor\/spacefiller-cavity-viruses.html\">CIH Spacefiller<\/a> <\/td>\n<td style=\"padding-left: 20px; width: 50%; text-align: left;\"> <a href=\"https:\/\/www.cknow.com\/cms\/vtutor\/laroux.html\">Laroux<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>Kakworm (KAK) is a worm. It takes advantage of a security vulnerability in Microsoft&#8217;s Internet Explorer browser and Outlook Express mail program. A patch for this vulnerability has been published by Microsoft and should be installed (Microsoft Security Bulletin MS99-032). Non-Microsoft browsers and mail programs are not affected. KAK is transmitted embedded in the HTML [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-766","post","type-post","status-publish","format-standard","hentry","category-vtutor","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Kakworm - C-Know Media<\/title>\n<meta name=\"description\" content=\"Kakworm takes advantage of a security vulnerability in Microsoft&#039;s Internet Explorer browser and Outlook Express mail program.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kakworm - C-Know Media\" \/>\n<meta property=\"og:description\" content=\"Kakworm takes advantage of a security vulnerability in Microsoft&#039;s Internet Explorer browser and Outlook Express mail program.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html\" \/>\n<meta property=\"og:site_name\" content=\"C-Know Media\" \/>\n<meta property=\"article:published_time\" content=\"2013-02-28T04:46:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-05-08T05:19:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png\" \/>\n<meta name=\"author\" content=\"DaBoss\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"DaBoss\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html\"},\"author\":{\"name\":\"DaBoss\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/#\\\/schema\\\/person\\\/47944007814fe46e32a1ebee5954638f\"},\"headline\":\"Kakworm\",\"datePublished\":\"2013-02-28T04:46:03+00:00\",\"dateModified\":\"2013-05-08T05:19:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html\"},\"wordCount\":258,\"image\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/wp-content\\\/uploads\\\/2013\\\/02\\\/arrow_up.png\",\"articleSection\":[\"VTutor\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html\",\"url\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html\",\"name\":\"Kakworm - C-Know Media\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/wp-content\\\/uploads\\\/2013\\\/02\\\/arrow_up.png\",\"datePublished\":\"2013-02-28T04:46:03+00:00\",\"dateModified\":\"2013-05-08T05:19:32+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/#\\\/schema\\\/person\\\/47944007814fe46e32a1ebee5954638f\"},\"description\":\"Kakworm takes advantage of a security vulnerability in Microsoft's Internet Explorer browser and Outlook Express mail program.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#primaryimage\",\"url\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/wp-content\\\/uploads\\\/2013\\\/02\\\/arrow_up.png\",\"contentUrl\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/wp-content\\\/uploads\\\/2013\\\/02\\\/arrow_up.png\",\"width\":16,\"height\":16,\"caption\":\"Up Arrow\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/vtutor\\\/kakworm.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kakworm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/#website\",\"url\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/\",\"name\":\"C-Know Media\",\"description\":\"Fun media for all\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/#\\\/schema\\\/person\\\/47944007814fe46e32a1ebee5954638f\",\"name\":\"DaBoss\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g\",\"caption\":\"DaBoss\"},\"url\":\"https:\\\/\\\/www.cknow.com\\\/cms\\\/author\\\/daboss-2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kakworm - C-Know Media","description":"Kakworm takes advantage of a security vulnerability in Microsoft's Internet Explorer browser and Outlook Express mail program.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html","og_locale":"en_US","og_type":"article","og_title":"Kakworm - C-Know Media","og_description":"Kakworm takes advantage of a security vulnerability in Microsoft's Internet Explorer browser and Outlook Express mail program.","og_url":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html","og_site_name":"C-Know Media","article_published_time":"2013-02-28T04:46:03+00:00","article_modified_time":"2013-05-08T05:19:32+00:00","og_image":[{"url":"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png","type":"","width":"","height":""}],"author":"DaBoss","twitter_misc":{"Written by":"DaBoss","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#article","isPartOf":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html"},"author":{"name":"DaBoss","@id":"https:\/\/www.cknow.com\/cms\/#\/schema\/person\/47944007814fe46e32a1ebee5954638f"},"headline":"Kakworm","datePublished":"2013-02-28T04:46:03+00:00","dateModified":"2013-05-08T05:19:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html"},"wordCount":258,"image":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#primaryimage"},"thumbnailUrl":"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png","articleSection":["VTutor"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html","url":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html","name":"Kakworm - C-Know Media","isPartOf":{"@id":"https:\/\/www.cknow.com\/cms\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#primaryimage"},"image":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#primaryimage"},"thumbnailUrl":"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png","datePublished":"2013-02-28T04:46:03+00:00","dateModified":"2013-05-08T05:19:32+00:00","author":{"@id":"https:\/\/www.cknow.com\/cms\/#\/schema\/person\/47944007814fe46e32a1ebee5954638f"},"description":"Kakworm takes advantage of a security vulnerability in Microsoft's Internet Explorer browser and Outlook Express mail program.","breadcrumb":{"@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#primaryimage","url":"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png","contentUrl":"https:\/\/www.cknow.com\/cms\/wp-content\/uploads\/2013\/02\/arrow_up.png","width":16,"height":16,"caption":"Up Arrow"},{"@type":"BreadcrumbList","@id":"https:\/\/www.cknow.com\/cms\/vtutor\/kakworm.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cknow.com\/cms\/"},{"@type":"ListItem","position":2,"name":"Kakworm"}]},{"@type":"WebSite","@id":"https:\/\/www.cknow.com\/cms\/#website","url":"https:\/\/www.cknow.com\/cms\/","name":"C-Know Media","description":"Fun media for all","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cknow.com\/cms\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.cknow.com\/cms\/#\/schema\/person\/47944007814fe46e32a1ebee5954638f","name":"DaBoss","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d4ba3f829b22682345f1dec9f43e839d822e1b4c570d7ce15475db8b4d5ce111?s=96&d=mm&r=g","caption":"DaBoss"},"url":"https:\/\/www.cknow.com\/cms\/author\/daboss-2"}]}},"_links":{"self":[{"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/posts\/766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/comments?post=766"}],"version-history":[{"count":0,"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/posts\/766\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/media?parent=766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/categories?post=766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cknow.com\/cms\/wp-json\/wp\/v2\/tags?post=766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}