x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Download Cloud Antivirus Gratis

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Kukudro.A

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Kukudro.A
Technical name:W97M/Kukudro.A!CME-745
Threat level:Low
Alias:Lafool.A
Type:Virus
Effects:  

It drops the Trojan Downloader.JIH in the affected computer. It uses the vulnerability in Microsoft Word MS01-034 to be automatically run just by viewing the document that contains it.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95/3.X

First detected on:June 28, 2006
Detection updated on:Oct. 18, 2006
StatisticsNo

Brief Description 

    

Kukudro.A is a macro virus that drops the Trojan detected as Downloader.JIH in the affected computer.

In order to do so, it uses a vulnerability in Microsoft Word, addressed in the security bulletin MS01-034. By exploiting this vulnerability, the macro security warning (which Word displays when a document containing macros is about to be opened) is not displayed, and therefore Kukudro.A is automatically run just by viewing the document.

Kukudro.A does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the computer. It has been reported that Kukudro.A has been massively sent via email, in a message that includes an attachment that consists in a Word document.

Visible Symptoms 

    

Kukudro.A is easy to recognize once it has affected the computer, as the Word document called MY_NOTEBOOK.DOC in which it reaches the computer has the following appearance: