W32.Yaha@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: February 15, 2002
Updated: February 13, 2007 11:55:57 AM
Type: Worm


W32.Yaha@mm is a mass-mailer that sends itself to all the email addresses it finds in the Windows address book and in the files with the extension of .ht*.
This worm copies itself to the files, C:\Recycled\Msscra.exe and C:\Recycled\Msmdm.exe.

Protection

  • Initial Rapid Release version February 19, 2002
  • Latest Rapid Release version January 22, 2010 revision 041
  • Initial Daily Certified version February 19, 2002
  • Latest Daily Certified version January 22, 2010 revision 048
  • Initial Weekly Certified release date February 20, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 50 - 999
  • Number of Sites: More than 10
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High

Writeup By: Douglas Knowles
Search by name
Example: W32.Beagle.AG@mm
Learn more about Zero-Day / Operation Aurora / Hydraq
Symantec DeepSight Screensaver