WM97/Kukudro-A is a Trojan dropping Word document.
WM97/Kukudro-A drops and runs a file detected by Sophos as Troj/Kuku-A.
Sophos has seen the Trojan horse spammed out in email messages with the following characteristics:
Subject: "worth to see", "prices", "Hi", or "Hello".
Message body:
Hello <name>
--
Regards, <name> <email address>
Where <name> and <email address> are changing.
Attached to the email is a zip file (variously called prices.zip, apple_prices.zip or sony_prices.zip) containing an infected Microsoft Word document entitled my_Notebook.doc.
The Word document secretly installs the Troj/Kuku-A Trojan horse onto the PC.