<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Just an FYI</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT
face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial size=2>For those
of you that do online shopping and use pay pal</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><BR>The J variant of the Mimail worm appears to be causing a few problems
in the<BR>wild (enough to warrant a Level 3 warning from Symantec). Details
below...<BR><BR>Tuesday, November 18, 2003<BR><BR>Orange: Virus Threat Level =
Med<BR><BR>W32/Mimail-J drops itself into the Windows folder using the
names<BR>SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in
the<BR>root directory using the names pp.hta and
index2.hta.<BR><BR>W32.Mimail.J@mm<BR><BR>Discovered on: November 17,
2003<BR><BR>Last Updated on: November 18, 2003 04:06:19 AM</DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><A
href="http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.mimail.j@mm.html">http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.mimail.j@mm.html</A><BR><BR></DIV></BODY></HTML>