A computer virus which poses as a message from a newsletter from Trojaner Info, a popular German antivirus portal, has made its debut on the Net.

The Yarner worm, is a mass mailer, which spreads using its own SMTP routine - if a user is foolish enough to execute an infected attachment (normally called yawsetup.exe). Seven variants of the worm have been detected and users are urged to be particularly cautious of any emails with the subject line "Trojaner-Info Newsletter".

After a period of running on the system, the worm executes its destructive payload and attempts to delete all files from the hard drive. As usual, the virus only affects Windows PCs - Apple Mac and Linux users are not at risk.

The body of virus-infected emails carries a message written in German; antivirus vendors report the spread of worm among German users, though Yarner is far from reaching the spread associated with other recent virus outbreaks.

Antivirus vendors are updating anti-virus signatures to detect the virus and protection is now largely in place. ®

External links

Analysis on Yarner by Sophos (http://www.sophos.com/virusinfo/analyses/w32yarner.html)

Related Stories

It's My Party and I'll infect you if I want to (http://www.theregus.com/content/56/23843.html)
BadTrans-B tops virus charts (http://www.theregus.com/content/56/23903.html)
Gigger worm can format Windows PCs (http://www.theregus.com/content/56/23652.html)
Users haven't learned any lessons from the Love Bug (http://www.theregus.com/content/archive/16668.html)
Rise in viruses within emails outpacing growth of email (http://www.theregister.co.uk/content/archive/18099.html)