Threat Of Yaha Virus Upgraded - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


Threat Of Yaha Virus Upgraded

The Yaha.k virus spreads primarily through E-mail, using its own E-mail engine, and the virus also tries to shut down antivirus and security-related software as it infects.

Antivirus vendors are warning of a new version of the Yaha virus, W32/Yaha.m or Win32/Yaha.k. The malevolent code is spreading more rapidly than was thought it would when it was discovered Dec. 21. Monday, Network Associates Inc.'s Anti-Virus Emergency Response Team (Avert) upgraded the Yaha variant's risk assessment from "low" to "medium" because of its increased activity. Secure E-mail services firm MessageLabs is reporting that it stopped 7,377 Yaha.k infections in the past 24 hours.

According to Network Associates, the Yaha.k virus spreads primarily through E-mail, using its own E-mail engine, and the virus also tries to shut down antivirus and security-related software as it infects.

The virus uses many different subject lines, including "XXX Screensavers 4 U," "Free Demo game," and "Are you the BEST," as lures. The virus also arrives with a wide range of potential attachment file names, including "zXXX_BROWSER.EXE," "Jenna_Jemson.scr," and "" More information is available at

Jimmy Kuo, a Network Associates Avert fellow, says the infection rate for Yaha.k has either stabilized or increased only slightly in Europe. Kuo says the virus appears to be hitting home users harder than businesses, which are more likely to keep antivirus systems up to date and block certain attachments at their E-mail gateways. A more complete damage assessment won't be possible until after New Year's Day. "Infections will increase again for one more weekend," Kuo says. "People are still out of the office for the holidays and there will be some companies that won't see that they've been infected until employees return to work."

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
The State of IT & Cybersecurity Operations 2020
The State of IT & Cybersecurity Operations 2020
Download this report from InformationWeek, in partnership with Dark Reading, to learn more about how today's IT operations teams work with cybersecurity operations, what technologies they are using, and how they communicate and share responsibility--or create risk by failing to do so. Get it now!
The Best Way to Get Started with Data Analytics
John Edwards, Technology Journalist & Author,  7/8/2020
10 Cyberattacks on the Rise During the Pandemic
Cynthia Harvey, Freelance Journalist, InformationWeek,  6/24/2020
IT Trade Shows Go Virtual: Your 2020 List of Events
Jessica Davis, Senior Editor, Enterprise Apps,  5/29/2020
Register for InformationWeek Newsletters
Current Issue
Key to Cloud Success: The Right Management
This IT Trend highlights some of the steps IT teams can take to keep their cloud environments running in a safe, efficient manner.
White Papers
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll