WORM_WUKILL.GEN

This is Trend Micro's generic detection for variants from the WORM_WUKILL family.

Worms from the said family are known to propagate by dropping copies of itself into all the mapped and local drives on an affected system. They also attempt to propagate via email by sending out copies of themselves to email addresses they are able to previously gather from the Windows Address Book (WAB) of already infected systems. However, inherent errors in their code prevent them from executing the said propagation routine.

It is also important to note the, upon execution, worms from the WUKILL family display fake error messages.

Related Items