What is W32.Yaha.K@mm and how does it affect me? Due to an increased number of submissions, Symantec Security Response is upgrading W32.Yaha.K@mm from a Category 2 to a Category 3. W32.Yaha.K@mm is a worm variant of W32.Yaha.J@mm. W32.Yaha.K@mm will terminate some anti-virus and firewall processes. Additionally, it can email itself to all the contacts in the Windows Address Book, MSN Messenger, .NET Messenger, Yahoo Pager, as well as searching for any contacts listed in files whose extensions contain the letters, HT. The email message has a randomly chosen subject line, message, and attachment name. This threat is written in the Microsoft C++ language and is compressed with UPX. The uncompressed size is about 75 KB.B.
What action can I take from here? Symantec Security Response posted virus definitions to protect against this threat on December 30, 2002 (via LiveUpdate). All users of Norton AntiVirus who do not have up-to-date virus protection should immediately run LiveUpdate for protection from W32.Yaha.K@mm. Virus definitions are available via the LiveUpdate feature in the Norton AntiVirus product or the Symantec Security Response Web site. Symantec Security Response encourages all Norton AntiVirus users to regularly download virus definitions in order to protect against future threats. For more information on how to run LiveUpdate, please click here. UPGRADE CUSTOMERS - If you have an older version of Norton AntiVirus and would like to upgrade to Norton AntiVirus 2003, please click here. NEW CUSTOMERS - If you would like to purchase Norton AntiVirus 2003, please click here. Sincerely, Symantec Security Response Team Symantec Corporation
|