Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

W32/Mimail-J

Nov 17, 2003 9:18AM PST

Type
Win32 worm

Description
W32/Mimail-J is a worm very similar to W32/Mimail-I. This variant tries to get you to give up your credit card details, just like W32/Mimail-I, but also asks you for additional personal information such as your Social Security Number and your mother's maiden name.
W32/Mimail-J drops itself to your Windows folder using the names SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in your root directory using the names pp.hta and index2.hta. These web pages include scripts which ask you for the personal information described above.

http://www.sophos.com/virusinfo/analyses/w32mimailj.html

Discussion is locked