I-Worm.Win32.Yaha.28672 is another variant of Yaha.
How it spread
I-Worm.Win32.Yaha.28672 spreads itself via email. It retrieves email addresses from the following:
- Windows address book
I-Worm.Win32.Yaha.34304, which was found on 24 Dec 2002, is another variant of I-Worm.Win32.Yaha.
How it spreads
The worm selects mail recipients from the following files or address books:
- .NET messen..
VBS.io is a Trojan Horse script virus. It cannot spread itself and is created and run by PHP.io.
It overwrites '.sys', '.dll', '.ocx', and '.drv' files in C:WindowsSystem. These infected files cannot be recovered.