We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Win32/Evaman
Detected by Microsoft Defender Antivirus
Aliases: No associated aliases
Summary
Windows Defender Antivirus detects and removes this threat.
Win32/Evaman is a mass-mailing worm that targets Microsoft Windows.
The worm spreads by sending itself as an email attachment to email addresses that it finds using Yahoo! People Search or on the infected computer. The worm infects the computer when the user opens the email attachment. The worm may try to disable certain security-related software on the infected computer. Some Win32/Evaman variants may cause the user to be logged off immediately after logon.