IM-Worm.Win32.Yahos.hb
IM-Worm.Win32.Yahos.hb is a dangerous network-aware computer worm that tries to replicate across the existing networks. IM-Worm.Win32.Yahos.hl will download files to the computer without user's consent, which will lead to security risk. IM-Worm.Win32.Yahos.hl can enable the attacker to get remote access to the affected computer system.
File System Details
IM-Worm.Win32.Yahos.hb creates the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Windir%\ndl.dl | N/A |
| 2. | %Windir%\nvsvc32.exe [file and pathname of the sample #1] | N/A |
Registry Details
IM-Worm.Win32.Yahos.hb creates the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
