Wukill.mstray - WTF ???

[RompelStompel]

Need some help :eek:

Windoze Defender picks this worm (Wukill.Mstray) each time up , even when me 1852 PC has not been online !!

Have been to the Symantec website - this worm is not even listed :confused:

Am running NIS 2006 , with Windoze XP SP2 .

Me Windoze updates are up to date (set on notify not automatically download) and me NAV 2006 defs are also up to date .

The Symantec website only lists a wu32.Wullik@mm worm . Had a look at the XP Registery - none of the mods to the Reg that the wu32.Wullik@mm worm does , is present on me Registry.

Just cannot get rid of me mystery wukill.mstray worm - what to do now ??

I use Vodacom 3G and the NIS 2006 firewall . Browser is Firefox ver 1.0.7 and me email thingy is Thunderbird.

Mucho gracias in advance for any help - how about a case of beer if you can help me :cool:

Rompelstompel - PM me for a Gmail invite - have 93 left to give out :D

[tibby.dude]

http://www.spywaredetails.com/index.php?a=spyware&act=read&id=9336

alias is also Win32/HLLW.Wukill

[RompelStompel]

Yep , had a look.

Kinda scary that this piece of k@k was able to infect my system despite having NAV 2006.

Norton sucks bigtime :mad:

Now to remove this piece of sh*t from my system :confused:

Rompelstompel

[The_Librarian]

Feh, I remember that the Opaserv worm was able to infect WindowsME, 98 and 95 systems, despite these having Norton 2002 or 2003 on...

Easy to block the Opaserv worm - all you need to check for is the name of the worm's executable, delete it (in safe mode) and create a directory with exactly the same name. Stops that pesky bugger cold.

Hope you can get rid of that pesky bugger... good luck.

If you battle, give a shout and we will try to do what we can to screw your system further up... :D

[playkiller no.2]

update your firefox.
latest version is 1.5.0.3

[RompelStompel]

Thanks all for the help - much appreciated :D

Rompelstompel