Sophos

W32/Kookoo-A

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Infected files
Affected operating systems Windows
Included in our products from December 2006 (4.12)
Protection available since 20 January 2006 02:40:18 (GMT)
Last updated 24 October 2006 00:56:23 (GMT)
Detected by All Sophos products

Action

Please follow the instructions for disinfecting PE executables.

Change any data that may have become compromised.

More Information

W32/Kookoo-A is a virus for the Windows platform.

W32/Kookoo-A spreads via infected files.

W32/Kookoo-A runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

W32/Kookoo-A includes functionality to:

- send stolen confidential information to a remote address
- provide a proxy server
- silently download, install and run new software
- terminate and delete anti-virus related software W32/Kookoo-A is a virus for the Windows platform.

W32/Kookoo-A spreads via infected files.

W32/Kookoo-A runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

W32/Kookoo-A includes functionality to:

- send stolen confidential information to a remote address
- provide a proxy server
- silently download, install and run new software
- terminate and delete anti-virus related software

When the virus is installed it creates the file <System>\oledsp32.dll, which is detected as W32/Kookoo-A.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer