Threat Search: 

ThreatExpert's Statistics for WORM_WUKILL.GEN [Trend Micro]:

WORM_WUKILL.GEN [Trend Micro] is also known as:
Threat AliasNumber of Incidents
W32.Wullik@mm [Symantec]68
W32/Wukill.worm.gen [McAfee]68
Email-Worm.Win32.Rays [Kaspersky Lab]56
Email-Worm.Rays [PC Tools]54
W32/Wukill-B [Sophos]12
Worm:Win32/Wukill.F@mm [Microsoft]10
Email-Worm.Win32.Rays.c [Kaspersky Lab]9
Win32/Rays.worm.49152 [AhnLab]7
I-Worm.Wukill.B [PC Tools]6
Email-Worm.Win32.Rays [Ikarus]4
Exploit.HTML.Agent.am [Kaspersky Lab]3
Email-Worm.Rays!sd5 [PC Tools]2
W32/Generic.m [McAfee]2
Demiurg.16354 [PC Tools]1
Email-Worm.VB!sd5 [PC Tools]1
Email-Worm.Win32.VB.bo [Kaspersky Lab]1
Email-Worm.Win32.VB.bx [Kaspersky Lab]1
I-Worm.VB.EWZ [PC Tools]1
Trojan:Win32/Agent [Microsoft]1
W32.Demig.16354 [Symantec]1
W32.Feldor.A [Symantec]1
W32/Traxg-F [Sophos]1
Worm:Win32/Wukill.BG@mm [Microsoft]1
Worm:Win32/Wukill@mm.gen!A [Microsoft]1

WORM_WUKILL.GEN [Trend Micro] has the following possible country of origin:
OriginNumber of Incidents
China45

WORM_WUKILL.GEN [Trend Micro] is known to be created as:
%FontsDir%\4b9ab.com
%System%\enu.exe.exe
%System%\movies.exe.exe
%System%\song.exe.exe
%System%\winfile.exe.exe
%Windir%\mstray.exe
Notes:
  • %FontsDir% is a variable that refers to a virtual folder containing fonts. A typical path is C:\Windows\Fonts.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.