One sick puppy authored W32/Kukoo-A

Aug 16, 2007 12:54 GMT  ·  By

There are a lot of ways to cry out for help. Especially if you are ugly, hate yourself and have a perpetual death wishes. And suicidal tendencies are a behavior generally associated with such an assortment of emotions. But the fact of the matter is that there is no general, one-size-fits-all rule in this aspect, and as such, exceptions are common. And with the Windows platform at your disposal, you could potentially reach approximately one billion users with your cry.

"The worm W32/Kukoo-A was written by someone who is ostensibly screaming out for help. The author claims to wish for a visit from the Grim Reaper with a certain pathos in the choice of words. However, the worm uses social engineering on multiple levels in order to get the hapless victim to execute it. If the option to hide known extensions is chosen (not recommended but part of the default configuration) in Explorer, it is clear that the worm's attempt to masquerade as a standard Windows folder with interesting content is quite effective," revealed a SophosLabs security expert.

W32/Kukoo-A is a worm designed for the Windows platform. The malware spreads through network shares and compromises the registry with a rather particular installation. If you do mange to get infected, you will be able to find a registry key under HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun with the name "I'm so ugly, i hate myself and I want to die." Obviously, the author was one sick puppy, but this anodyne details failed to stop him from creating the malware.

Or from speculating the weaknesses in human nature for spreading the malicious code. W32/Kukoo-A creates what appears to be a Windows Folder named "Sexy girls" as a network share. The promise of sexy girls is often sufficient to attract the double click that will lead to compromising the victim's Windows copy.

Photo Gallery (2 Images)

Windows XP
W32/Kukoo-A suicidal in the registry
Open gallery