Discovered on: February 19, 2002
Last Updated on: February 19, 2002 at 06:19:28 AM PST

W32.Yarner.A@mm is a mass-mailing worm written in the Delphi language. The worm sends itself to emails addresses found in the Microsoft Outlook address book and local files.

The worm uses the system configured or hard coded SMTP server to send messages with the subject Trojaner-Info Newsletter followed by the current date. The message body is in German and the attachment name is yawsetup.exe.

In addition, the worm may attempt to delete all files on the computer.


Discovered on: February 15, 2002
Last Updated on: February 15, 2002 at 04:31:49 PM PST

W32.Yaha@mm is a mass-mailer that sends itself to all email addresses it finds in the Windows address book and within files that have the extension of .ht*.

It copies itself to the files, C:\Recycled\Msscra.exe and C:\Recycled\Msmdm.exe.