e-mail worm Mimail.C

[andsome]

- The worm Mimail.C is still spreading and a new variant

has appeared: Mimail.D -

Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)

MADRID, November 1st 2003

In the last hours, the e-mail worm Mimail.C is still spreading all over

the world. However, it is not an epidemic right now. It has been

affecting users from Spain, Uruguay, Chile, Bolivia and Venezuela

(more information on http://www.pandasoftware.com). As the virus

is capable of launch DoS (Denial of Service) attacks against web servers,

it is possible that it activity will be increased at the beginning of the

week. So, Panda Software recommends users to pay attention to this worm.

A new variant has appeared a few hours ago: Mimail.D. The behaviour of

this new worm is very similar to the first variant W32/Mimail. It

spreads via e-mail in a message with the following characteristics:

· Sender:

admin@%domain%

%domain% is the domain of the user's e-mail address.

·Subject:

Your account xxxxxxx

xxxxxxx is a group of random lower-case letters.

·Message:

Hello there,

I would like to inform you about important information regarding

your email address. This email address will be expiring.

Please read attachment for details.

---

Best regards, Administrator

xxxxxxxx

·Attachments:

message.zip

·In addition, the message includes the high priority flag.

Mimail.D searches for e-mail addresses, in order to send out a

copy of itself using its own SMTP engine:

Due to the incidents received with Mimail.C and the possibility of

an increase in the number of infections caused for this or the new variant,

Panda Software advises users to be extremely careful with e-mail messages

received and to update their antivirus solutions immediately.

Panda Software has already released the updates, which ensure their

antivirus solutions detect and eliminate Mimail.C and Mimail.D. Users

can also detect this and other malicious code using the free, online

antivirus, Panda ActiveScan, which is available on the company's website at

www.pandasoftware.com.

For more information about Mimail.C and Mimail.D, visit Panda Software's

Virus Encyclopedia at the following address:

http://www.pandasoftware.com/virus_info/encyclopedia.

NOTE: The address above may not show up on your screen as a single line.

This would prevent you from using the link to access the web page. If this

happens, just use the 'cut' and 'paste' options to join the pieces of the

URL.

------------------------------------------------------------

To unsubscribe from Oxygen3 24h-365d, please visit:

http://www.pandasoftware.com/unsubscribe.asp

To contact with Panda Software, please visit:

http://www.pandasoftware.com/about/contact/

------------------------------------------------------------

[mark2]

VIRUS alert! Win32/Mimail.C@mm

November 3rd, 2003 - RAV AntiVirus Team is alerting all computer users that a

dangerous Internet worm, called Win32/Mimail.C@mm (and the variants

Win32/Mimail.E@mm and Win32/Mimail.F@mm), is reported to have a high infection

level in the last 24 hours. This worm is classified as "Potentially destructive"

by RAV Team and its spreading process has been carefully followed in the last 24

hours."

From inprofile's post at the pit

be careful what you're opening :blink:

[andsome]

Thank heaven's for Mailwasher

[Chris]

W32.Mimail Removal Tool