I-Worm.Win32.Yaha.28672 is another variant of Yaha.

How it spread

I-Worm.Win32.Yaha.28672 spreads itself via email. It retrieves email addresses from the following:

- Windows address book
- ..

I-Worm.Win32.Yaha.34304, which was found on 24 Dec 2002, is another variant of I-Worm.Win32.Yaha.

How it spreads

The worm selects mail recipients from the following files or address books:

- .NET messen..