I-Worm.Win32.Yaha.28672 is another variant of Yaha.
How it spread
I-Worm.Win32.Yaha.28672 spreads itself via email. It retrieves email addresses from the following:
- Windows address book
I-Worm.Win32.Yaha.34304, which was found on 24 Dec 2002, is another variant of I-Worm.Win32.Yaha.
How it spreads
The worm selects mail recipients from the following files or address books:
- .NET messen..