Welcome to the Virus Encyclopedia of Panda Security.
It checks if processes containing certain text strings are active in memory, and ends them.
|First detected on:||Sept. 16, 2004|
|Detection updated on:||Sept. 16, 2004|
Evaman.D is a worm that checks every 5 seconds if processes containing certain text strings are active in memory, and ends them. Some processes that include those text strings belong to antivirus programs and system tools, among others, and ending them would leave the affected computer vulnerable to the attack of other malware.
Evaman.D spreads via e-mail, in a message with variable characteristics.
Evaman.D is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.