Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||Without destructive effects. It changes the viewing options of hidden files and file extensions recognized by Windows.|
|First detected on:||Nov. 21, 2003|
|Detection updated on:||June 22, 2009|
|Yes, using TruPrevent Technologies
Wukill.A is a worm that does not have any destructive effects and spreads via email and making copies of itself to drives A: through E:, both local and mapped, to which it has access.
Wukill.A changes the viewing option of hidden and system files, hiding them from the user. It also hides the file extensions recognized by Windows. Through these actions, Wukill.A attempts to hide its presence in the affected computer.
On Windows Me/98/95 computers, Wukill.A runs the program Windows File Manager, which is in the Windows directory.
Note: in September, 2005 PandaLabs detected a Trojan called SymbOS/Multidropper.A, which affected cellular phones running the operating system Symbian. This Trojan copied the files belonging to the worms Wukill.A and Korgo.BF to the SD memory of the cellphone. Therefore, though these worms are specifically aimed at affecting Windows computers and cannot be executed in Symbian, still their files could be detected in those devices. For further information, please refer to the information about Multidropper.A.
Wukill.A is easy to recognize once it has reached the computer, as it displays the following fake error message on screen when it is run on Windows XP/2000/NT computers: