[Northkeep] ORANGE: Virus Threat Level = MED

BlakHawk blakhawk at blakhawk.cjb.net
Tue Nov 18 09:16:26 PST 2003


Just an FYI
For those of you that do online shopping and use pay pal


The J variant of the Mimail worm appears to be causing a few problems in the
wild (enough to warrant a Level 3 warning from Symantec). Details below...

Tuesday, November 18, 2003

Orange: Virus Threat Level = Med

W32/Mimail-J drops itself into the Windows folder using the names
SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in the
root directory using the names pp.hta and index2.hta.

W32.Mimail.J at mm

Discovered on: November 17, 2003

Last Updated on: November 18, 2003 04:06:19 AM

http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.mimail.j@mm.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ansteorra.org/pipermail/northkeep-ansteorra.org/attachments/20031118/57c07268/attachment-0001.htm>


More information about the Northkeep mailing list