[mh]

WARNING: W32.Yarner.A@mm
Threat level: Category 3
Type: Worm
Virus Definitions: February 19, 2002
*************************************

February 19, 2002

Dear security alert subscriber:

Symantec Security Response has received a number of
submissions on W32.Yarner.A@mm and is rating it as a Category 3.

**************************************************
WHAT IS W32.Yarner.A@mm AND HOW DOES IT AFFECT ME?
**************************************************
W32.Yarner.A@mm is a mass-mailing worm written in
the Delphi language that will delete all files on
Windows machines.

The worm sends itself to email addresses found in
the Microsoft Outlook address book and local files.

W32.Yarner.A@mm uses the system configured or
hard-coded SMTP server to send messages with the
following characteristics:

Subject: Trojaner-Info Newsletter [current date]
Attachment: yawsetup.exe

The message body is in German.

**************************************************
WHAT ACTION CAN I TAKE FROM HERE?
**************************************************
Symantec Security Response suggests all users of
Norton AntiVirus download the latest virus
definitions dated February 19, 2002 for complete
protection from W32.Yarner.A@mm.

Virus definitions are available via the LiveUpdate
feature in the Norton AntiVirus product or the