Devilfrank
Sehr aktiv
Due to an increased rate of submissions, Symantec Security Response has upgraded this threat to a Category 3 rating.
W32.Mimail.J@mm is a mass-mailing worm which attempts to steal personal information. The worm displays a series of forms which ask the user to enter their credit card information. (See the Technical Description for screen shots). This information is saved and later emailed to several predetermined email addresses. This worm is very similar to W32.Mimail.I@mm.
The email has the following characteristics:
From: [email protected]
Subject: IMPORTANT <random string of characters>
Attachment: InfoUpdate.exe -or-
www.paypal.com.pif
--------------------------------------------------------------------------------
Note: Virus definitions dated November 17, 2003 rev 21 (20031117.021) or greater are required to detect this threat.
--------------------------------------------------------------------------------
Symantec Security Response has developed a removal tool to clean the infections of W32.Mimail.J@mm.
Also Known As: W32/Mimail.j@MM [McAfee], WORM_MIMAIL.J [Trend]
Variants: W32.Mimail.I@mm
Type: Worm
Infection Length: 13,856 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
W32.Mimail.J@mm is a mass-mailing worm which attempts to steal personal information. The worm displays a series of forms which ask the user to enter their credit card information. (See the Technical Description for screen shots). This information is saved and later emailed to several predetermined email addresses. This worm is very similar to W32.Mimail.I@mm.
The email has the following characteristics:
From: [email protected]
Subject: IMPORTANT <random string of characters>
Attachment: InfoUpdate.exe -or-
www.paypal.com.pif
--------------------------------------------------------------------------------
Note: Virus definitions dated November 17, 2003 rev 21 (20031117.021) or greater are required to detect this threat.
--------------------------------------------------------------------------------
Symantec Security Response has developed a removal tool to clean the infections of W32.Mimail.J@mm.
Also Known As: W32/Mimail.j@MM [McAfee], WORM_MIMAIL.J [Trend]
Variants: W32.Mimail.I@mm
Type: Worm
Infection Length: 13,856 bytes
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]