Kassbot

Worm Kassbot, also known as Nanspy, spreads in local area networks. It infects PCs running vulnerable Windows version with unpatched security holes. Kassbot modifies essential computer settings to block access to certain web sites. It contacts predefined web servers to receive commands from the attacker and download updates. It also compromises other vulnerable network PCs. Kassbot is relatively easy to remove. It depends on a single executable located in the default computer folder and one registry entry.