Home / malware

PDF

JS.Blackworm.A

First posted on 21 November 2011.
Source: BitDefender

Aliases :

JS.Blackworm.A is also known as JS.Yamanner@m.

Explanation :

The virus is coded in Javascript and exploits a vulnerablity of the Yahoo e-mail system.

Once an infected e-mail has been opened, the virus will automatically execute, and will do:

1. Attempt to get all your contacts, and sort out only those that contain @yahoo.com and @yahoogroups.com

2. Attempt to send itself to all the e-mails gathered with the specifications above (see Symptoms)

3. Sends all gathered contacts to www.av3.net[removed]

The virus does not have a payload, and it is only spreading.

Last update 21 November 2011

 

TOP