Win32/Yeltminky

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

Win32/Yeltminky is a family of worms that spreads by making copies of itself on all available drives and creating an autorun.inf file to execute that copy.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

Additional remediation instructions for Win32/Yeltminky

This threat may make lasting changes to a computer's configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following articles:

Recreating a clean Hosts file: http://support.microsoft.com/kb/972034
Changing your Internet Explorer Home Page:
- For Windows 7: http://windows.microsoft.com/en-us/windows7/Change-your-Internet-Explorer-home-page
- For Internet Explorer 7 and 8 in Windows Vista: http://windows.microsoft.com/en-US/windows-vista/Change-your-Internet-Explorer-home-page
- For Internet Explorer 6: http://support.microsoft.com/kb/252464
Stopping and starting Windows services:
- For Windows 7: http://windows.microsoft.com/en-US/windows7/What-are-Administrative-Tools
- For Windows Vista: http://windows.microsoft.com/en-US/windows-vista/What-are-Administrative-Tools
- For Windows XP: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sys_srv_start_service.mspx
Correctly disabling Autorun in Windows: http://support.microsoft.com/kb/953252

Win32/Yeltminky

Summary

What to do now

Additional remediation instructions for Win32/Yeltminky

Technical information

Threat behavior

Installation

Spreads via...

Payload

Prevention

Take the following steps to help prevent infection on your computer:

Enable a firewall on your computer

Get the latest computer updates

Use up-to-date antivirus software

Limit user privileges on the computer

Use caution when opening attachments and accepting file transfers

Use caution when clicking on links to webpages

Avoid downloading pirated software

Protect yourself from social engineering attacks

Use strong passwords

Symptoms

System changes