Sophos

WM97/Kukudro-A

Aliases
  • CME-745
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Drops more malware
Included in our products from August 2006 (4.08)
Protection available since 27 June 2006 14:30:37 (GMT)
Detected by All Sophos products

Action

More Information

WM97/Kukudro-A is a Trojan dropping Word document.

WM97/Kukudro-A drops and runs a file detected by Sophos as Troj/Kuku-A.

Sophos has seen the Trojan horse spammed out in email messages with the following characteristics:

Subject: "worth to see", "prices", "Hi", or "Hello".

Message body:
Hello <name>

--
Regards, <name> <email address>

Where <name> and <email address> are changing.

Attached to the email is a zip file (variously called prices.zip, apple_prices.zip or sony_prices.zip) containing an infected Microsoft Word document entitled my_Notebook.doc.

The Word document secretly installs a Trojan horse onto the PC

The Word document secretly installs the Troj/Kuku-A Trojan horse onto the PC.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer