Low threat Level,
Low damage capabilities,
Dangers:
Distinguishing charcteristscs:
Subject is one of the following:
"Fw: "
" ", ":-)", "!", "!!"
"to ur friends", "to ur lovers", "for you", "to see", "to check", "to
watch", "to enjoy", "to share"
"Screensaver", "Friendship", "Love", "relations", "stuff"
"Romantic", "humour", "New", "Wonderfool", "excite", "Cool", "charming
", "Idiot", "Nice", "Bullsh*t", "One", "Funny", "Great", "LoveGangs",
"Shaking", "powful", "Joke", "Interesting"
"U realy Want this", "searching for true Love", "you care ur
friend", "Who is ur Best Friend ", "make ur friend happy", "True
Love", "Dont wait for long time", "Free Screen saver", "Friendship
Screen saver", "Looking for Friendship", "Need a friend?", "Find a
good friend", "Best Friends", "I am For u", "Life for
enjoyment", "Nothink to worryy", "Ur My Best Friend ", "Say 'I Like
You' To ur friend", "Easy Way to revel ur love", "Wowwwwwwwwwww check
it", "Send This to everybody u like", "Enjoy Romantic life", "Let's
Dance and forget pains", "war Againest Loneliness", "How sweet this
Screen saver", "Let's Laugh ", "One Way to Love", "Learn How To
Love", "Are you looking for Love", "love speaks from the
heart", "Enjoy friendship", "Shake it baby", "Shake ur friends", "One
Hackers Love", "Origin of Friendship", "The world of lovers", "The
world of Friendship", "Check ur friends Circle", "Friendship", "how
are you", "U r the person?", "Hi", "¯"
Attachment: Attachment:
The attachment name is constructed from the following file names:
loveletter
resume
biodata
dailyreport
mountan
goldfish
weeklyreport
report
love
followed by:
.doc
.mp3
.xls
.wav
.txt
.jpg
.gif
.dat
.bmp
.htm
.mpg
.mdb
.zip
This virus is a varient of the W32.Yaha.C@mm and has been repacked
to make it difficult for antivirus software to detect.
For more inforrmation see:
http://www.symantec.com/avcenter/venc/data/w32.yaha.z@mm.html