I-Worm.Win32.Yaha.28672 is another variant of Yaha.

How it spread

I-Worm.Win32.Yaha.28672 spreads itself via email. It retrieves email addresses from the following:

- Windows address book
- ..

I-Worm.Win32.Yaha.34304, which was found on 24 Dec 2002, is another variant of I-Worm.Win32.Yaha.

How it spreads

The worm selects mail recipients from the following files or address books:

- .NET messen..

VBS.San.A is written with Visual Basic Script and spreads via emails. It utilizes the security vulnerability of MS Outlook Express, infecting the system through opening of the email or through Preview Pane.

It deletes all folders in C..

VBS.Valentin is written with Visual Basic Script and spreads via emails. It utilizes the security vulnerability of MS Outlook Express, infecting the system through opening of the email or through Preview Pane.

It deletes all folders i..

W95M.Alex.A is a macro virus that displays an illegible message. If the user clicks OK, it deletes c:autoexec.bat, c:config.sys, and c:command.com on 23rd of every month.

On every 1st of the month, it displays a m..