[Northkeep] ORANGE: Virus Threat Level = MED

[faolanmacfarland at cox.net]

I even got this at work.. but not at my home email address where I signed up for service.. luckily my work email striped file for me.  but I have been watching for it.

Also.. it was obvious it was attempt at virus.. in far line of subject.. random letters.. same random ones who signed letter.  

Faolan
> 
> From: "BlakHawk" <blakhawk at blakhawk.cjb.net>
> Date: 2003/11/18 Tue PM 12:16:26 EST
> To: <northkeep at ansteorra.org>
> Subject: [Northkeep] ORANGE: Virus Threat Level = MED
> 
> Just an FYI
> For those of you that do online shopping and use pay pal
> 
> 
> The J variant of the Mimail worm appears to be causing a few problems in the
> wild (enough to warrant a Level 3 warning from Symantec). Details below...
> 
> Tuesday, November 18, 2003
> 
> Orange: Virus Threat Level = Med
> 
> W32/Mimail-J drops itself into the Windows folder using the names
> SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in the
> root directory using the names pp.hta and index2.hta.
> 
> W32.Mimail.J at mm
> 
> Discovered on: November 17, 2003
> 
> Last Updated on: November 18, 2003 04:06:19 AM
> 
> http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.mimail.j@mm.html
> 
> 
> _______________________________________________
> Northkeep mailing list
> Northkeep at ansteorra.org
> http://www.ansteorra.org/mailman/listinfo/northkeep
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ansteorra.org/pipermail/northkeep-ansteorra.org/attachments/20031118/194a2d2f/attachment-0002.htm>