W32/Evaman

W32/Evaman is a mass-mailing worm that hijacks and infects your computer. W32/Evaman may arrive as an infected attachment through email and then send its copies using its own SMTP engine to the addresses found in the infected computer. For gathering email addresses, W32/Evaman uses the Yahoo People Search web page and it generates a random search string. Once it is executed, W32/Evaman copies itself to the Windows system folder using the name wintasks.exe and creates registry entry so that it activates whenever Windows launches.