Full
Name: |
W32.YahooWorm.SVCHOST |
| Type: |
Worm |
| Also Known As: |
W32/Sohana-R (Sophos)
IM-Worm.Win32.Sohanad.t (Kaspersky)
W32.Yautoit (Symantec)
Win32/YahLover.AO (CA)
Worm/Sohanad.NAK (Avira) |
| Danger Level: |
8 |
| Category Description: |
Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files. |
| Comment: |
W32.YahooWorm.SVCHOST is spreading through USB devices as well as Yahoo Messenger. It installs the malware to the user's machine and execute automatically. It uses AutoIt Script to collect all the users from the buddy list and send the malicious link, which leads infection.This worm disable Taskbar,registry interface,msconfig and folder option. |
| |
|
| Properties: |
|
