Threat Database Worms IM-Worm.Win32.Yahos

IM-Worm.Win32.Yahos

IM-Worm.Win32.Yahos is a Windows platform worm. IM-Worm.Win32.Yahos propagates via instant messaging systems such as MSN Messenger, AOL Instant Messenger and Yahoo Messenger. IM-Worm.Win32.Yahos spreads by sending a malicious copy of itself, in the form of a link to all the contacts on the infected Instant Messaging system. IM-Worm.Win32.Yahos can be removed with a reliable anti-spyware application.

File System Details

IM-Worm.Win32.Yahos creates the following file(s):
# File Name Detections
1. %Temp%\IXP000.TMP\HITMAN~1.EXE N/A
2. %ProgramFiles%\Hitman Pro 3.5\HITMAN~1.EXE N/A
3. %CommonDesktopDir%\Hitman Pro 3.5.lnk N/A
4. %CommonPrograms%\Hitman Pro 3.5\Hitman Pro 3.5.lnk N/A
5. %CommonPrograms%\Hitman Pro 3.5\Remove Hitman Pro 3.5.lnk N/A
6. %CommonAppData%\Hitman Pro\Banner.bin N/A

Registry Details

IM-Worm.Win32.Yahos creates the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HitmanPro35]
[HKEY_LOCAL_MACHINE\SOFTWARE\Hitman Pro]

Related Posts

Trending

Most Viewed

Loading...