| Due to a low submission rate, Symantec Security Response is downgrading this threat to a Category 2.
W32.Yarner.A@mm is a mass-mailing worm. The worm sends itself to email addresses that it finds in the Microsoft Outlook address book and in local files.
The worm uses the system-configured or hardcoded SMTP server to send messages with the subject Trojaner-Info Newsletter, followed by the current date. The message body is in German and the attachment name is Yawsetup.exe.
In addition, the worm may attempt to delete all files on the computer. |