W32.Yarner.A@mm

Due to a low submission rate, Symantec Security Response is downgrading this threat to a Category 2.

W32.Yarner.A@mm is a mass-mailing worm. The worm sends itself to email addresses that it finds in the Microsoft Outlook address book and in local files.

The worm uses the system-configured or hardcoded SMTP server to send messages with the subject Trojaner-Info Newsletter, followed by the current date. The message body is in German and the attachment name is Yawsetup.exe.

In addition, the worm may attempt to delete all files on the computer.

Protection

• Initial Rapid Release version February 19, 2002
• Latest Rapid Release version July 12, 2008 revision 018
• Initial Daily Certified version February 19, 2002
• Latest Daily Certified version July 12, 2008 revision 019
• Initial Weekly Certified release date February 19, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: High

Distribution

• Distribution Level: High