Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | August 2006 (4.08) |
| Protection available since | 27 June 2006 14:30:37 (GMT) |
| Detected by | All Sophos products |
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
WM97/Kukudro-A is a Trojan dropping Word document.
WM97/Kukudro-A drops and runs a file detected by Sophos as Troj/Kuku-A.
Sophos has seen the Trojan horse spammed out in email messages with the following characteristics:
Subject: "worth to see", "prices", "Hi", or "Hello".
Message body:
Hello <name>
--
Regards, <name> <email address>
Where <name> and <email address> are changing.
Attached to the email is a zip file (variously called prices.zip, apple_prices.zip or sony_prices.zip) containing an infected Microsoft Word document entitled my_Notebook.doc.

The Word document secretly installs the Troj/Kuku-A Trojan horse onto the PC.
