x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Wukill.A

 
Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Wukill.A
Technical name:W32/Wukill.A.worm
Threat level:Medium
Type:Worm
Effects:  Without destructive effects. It changes the viewing options of hidden files and file extensions recognized by Windows.

Affected platforms:

Windows XP/2000/NT/ME/98

First detected on:Nov. 21, 2003
Detection updated on:June 22, 2009
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Wukill.A is a worm that does not have any destructive effects and spreads via email and making copies of itself to drives A: through E:, both local and mapped, to which it has access.

Wukill.A changes the viewing option of hidden and system files, hiding them from the user. It also hides the file extensions recognized by Windows. Through these actions, Wukill.A attempts to hide its presence in the affected computer.

On Windows Me/98/95 computers, Wukill.A runs the program Windows File Manager, which is in the Windows directory.

 

Note: in September, 2005 PandaLabs detected a Trojan called SymbOS/Multidropper.A, which affected cellular phones running the operating system Symbian. This Trojan copied the files belonging to the worms Wukill.A and Korgo.BF to the SD memory of the cellphone. Therefore, though these worms are specifically aimed at affecting Windows computers and cannot be executed in Symbian, still their files could be detected in those devices. For further information, please refer to the information about Multidropper.A.

Visible Symptoms 

    

Wukill.A is easy to recognize once it has reached the computer, as it displays the following fake error message on screen when it is run on Windows XP/2000/NT computers: