English 
Deutsch
Español
Français
Portuguese
Email Worm.Evaman.a Email-Worm.Evaman.a
By
Domesticus in 
Loading ...
Email-Worm.Evaman.a Description
Evaman is a worm virus that propagates through email. Once executed, Evaman will configure itself to automatically start when Windows starts. The worm will then try to connect to a list of SMTP servers (or your PCs default SMTP server). It will then randomly query email.people.yahoo.com and will gather email addresses from the results. It will then send itself to any emails that it is able to collect, as either an exe file or an scr file. It may masquerade as a delivery failure attempt email.
Type: Worms
How Can You Detect Email-Worm.Evaman.a?
Email-Worm.Evaman.a Technical Report
As new Email-Worm.Evaman.a details are reported by our customers and findings from our Threat Research Center, we will update this section.
The following Email-Worm.Evaman.a files with its MD5s were created in the system:
| File Name | File Size | MD5 |
|---|
| malware.exe | 14848 | d9ad184750f6428866af77ad0650dbff |
| wintasks.exe | 14848 | d9ad184750f6428866af77ad0650dbff |
| malware.exe | 23040 | ff4042799e47d5c3f743031fcd3b1f9a |
| syshosts.exe | 23040 | ff4042799e47d5c3f743031fcd3b1f9a |
Email-Worm.Evaman.a has typically the following processes in memory:
- wintasks.exe
- syshosts.exe
Important Article Disclaimer
This entry was posted on 08/17/07 and is filed under Worms.
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
