Home Malware Programs Worms IM-Worm.Win32.Yahos.hb

IM-Worm.Win32.Yahos.hb

Posted: March 21, 2011

M-Worm.Win32.Yahos.hb is a dangerous computer worm, which infiltrates a PC system and then communicates with a distant IRC server that may represent security risk for the affected system. IM-Worm.Win32.Yahos.hb leads to frequent system crashes and network corruption. Remove IM-Worm.Win32.Yahos.hb immediately because IM-Worm.Win32.Yahos.hb is able to make additional harm to your injured Windows system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\ndl.dl
    2 %Windir%\nvsvc32.exe [file and pathname of the sample #1]

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...