Thursday

W97M/KUKUDRO.A VIRUS


Information about the W97M/Kukudro.A Virus:

W97M/Kukudro.A is a macro virus. It arrives as an email attachment.

The subject of the infected mail will be any one of the following;

  • Hello
  • worth to see
  • Hi
  • prices

The body of the infected mail will be;

Hello (random name)--

Regards, (random name) (random email address)

The name of the infected attachment will be any one of the following;

  • apple_prices.zip
  • prices.zip
  • sony_prices.zip

The attached zip file contains the following word document file;

my_Notebook.doc

When the file is opened, it drops the following file in C:\ drive.

666inse_1.exe

The droped file will be executed and tries to download W32/Sality.R Virus from a pre-configured list.


This macro virus first appeared on June 27, 2006.

Other names of W97M/Kukudro.A Virus:
This Macro Virus is also known as W97M.Kukudro.A, W97M_DLOADER.BKV, Kukudro.A, WM97/Kukudro-A, W97M/Dropexe.

No comments:

Post a Comment