IM-Worm.Win32.Yahos
IM-Worm.Win32.Yahos is a Windows platform worm. IM-Worm.Win32.Yahos propagates via instant messaging systems such as MSN Messenger, AOL Instant Messenger and Yahoo Messenger. IM-Worm.Win32.Yahos spreads by sending a malicious copy of itself, in the form of a link to all the contacts on the infected Instant Messaging system. IM-Worm.Win32.Yahos can be removed with a reliable anti-spyware application.
File System Details
IM-Worm.Win32.Yahos may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Temp%\IXP000.TMP\HITMAN~1.EXE | |
| 2. | %ProgramFiles%\Hitman Pro 3.5\HITMAN~1.EXE | |
| 3. | %CommonDesktopDir%\Hitman Pro 3.5.lnk | |
| 4. | %CommonPrograms%\Hitman Pro 3.5\Hitman Pro 3.5.lnk | |
| 5. | %CommonPrograms%\Hitman Pro 3.5\Remove Hitman Pro 3.5.lnk | |
| 6. | %CommonAppData%\Hitman Pro\Banner.bin |
Registry Details
IM-Worm.Win32.Yahos may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HitmanPro35]
[HKEY_LOCAL_MACHINE\SOFTWARE\Hitman Pro]
