Name : Msmdm.exe
Path : C:\Recycled\msmdm.exe
[ C:\Recycled\msmdm.exe ]
type : Internet
Name : W32.Yaha.A@mm
Alias : I-Worm.Lentin.a,
level : Low
Msmdm.exe is the main
component dropped by Yaha. It is
a mass mailing worm uses e-mail addresses stored
in Windows Address book and also collects
addresses from .ht* files to distribute infected
arrives as an e-mail attachment, message subject
the Heart of your Valentine with this beautiful
or Fw: Melt the Heart of your Valentine with this
beautiful Screen saver".
The attachment name will be "valentin.scr".
The SMTP server used to
send the emails is chosen either from the
registry or from the following list inside the
If the infected e-mail
attachment is executed, it runs as a scren saver
but also copies itself to C:\recycled with the
filenames msmdm.exe and msscra.exe.
the worm code
executed first. After that it activates the
corresponding application. The worm is loaded
automatically by changing the following keys in
Yaha worm doesn't contain
any destructive payloads. But if you have deleted
the worm before fixing the registry your
applications won't work.
creates the file "MSMDM.EXE" in
Recycled folder. The
presence of this file ensures you are infected
with this worm. Yaha
Worm changes registry keys when infecting the
machine and it should be fixed before deleting
the main worm file "MSMDM.EXE"
stored in Recycled folder.
How can I protect my
Solo has incorporated
Msmdm.exe in its signature file to protect users
from this worm attack. Solo antivirus registered
users are already protected from this worm. Make
sure that you have installed registered version
of Solo Antivirus to protect your system from all
to remove this worm?
you are already infected with Msmdm.exe process,
you can remove it from your computer using Solo
Antivirus software. Solo antivirus can
detect and remove W32.Yaha.A@mm safely.
Use the following link to Download 30 day
trial version of Solo antivirus to
remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VBS, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
purchase Solo antivirus using the link