Quantcast
Subscribe to magazine

Yaha Virus Lingers Into the New Year

Virus was largely contained before the holidays, but a new variant is still making the rounds.

Laura Rohde, IDG News Service

  • 0 Yes
  • 0 No

A new variant of the Yaha computer virus which emerged December 21 and was detected on thousands of PCs over the holiday season appears to be making a gradual retreat but is still ranked as a "medium risk" by security software vendors.

Security vendor MessageLabs, which calls the new variant W32/Yaha.K, said the rate of spread has been declining steadily since Monday when the company intercepted more than 8,000 copies of the virus. By Wednesday that figure had declined to 6,500 and it stood at just over 2,000 on Thursday afternoon in Europe.

Altogether more than 34,000 copies of the virus had been detected by the Gloucester, U.K.-based company, MessageLabs originally identified the virus as an existing variant, called Yaha.M, but has since determined that a new variant is making the rounds.

According to MessageLabs, the origin of the virus was Kuwait and computers in 100 countries have been affected by it, especially in the Netherlands, the U.K., Canada, Egypt, United Arab Emirates, Saudi Arabia, and Australia.

Threat Assessments

Symantec, which is calling the worm W32.Yaha.L@mm, rates the virus' threat assessment as low, the damage assessment as medium, and the distribution of Yaha as high, according to information on its Web site.

McAfee.com and parent company Network Associates rated W32/Yaha.k as "medium risk" to both home and corporate users.

Helsinki's F-Secure gave the Yaha.K virus a level 2 alert on its scale of three levels, meaning the virus was causing widespread infection. It said the virus carries aliases including Yaha.M, W32/Lentin.H@mm, I-Worm.Lentin.h, and Yaha.K!e2a2.

The worm affects mainly systems running Microsoft's Windows operating system and appears as an e-mail attachment in the form of an .exe or .scr file. Infected e-mails carry a wide variety of subject headings and messages. The virus contains its own e-mail client to mail itself out, forging the "from" address. It attempts to close down a number of firewalls and antivirus programs, according to MessageLabs.

  • Recommend this story?
  • 0 Yes
    0 No

Print 65% more pages than with refilled inks. Trust Original HP Inks. Hit Print Reliably.

Featured APC Accessories For Your System
10% Off Entire Cart at Online Store

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

People who read this also read:

  • HP Ink Center Bring improved color and brilliance to your printed material. Visit the Resource Center for more info...
  • Lenovo Laptop Showcase Find out how Lenovo IdeaPads and Thinkpads balance performance and portability. Visit the Lenovo Resource Center for more info...

PC World's Marketplace