Posted in GD as a public service.
The poster is not an employee of, or in any way associated with Panda Software.
---
- The worm Mimail.C is still spreading and a new variant has appeared: Mimail.D
Virus Alerts, by Panda Software (
http://www.pandasoftware.com)
Madrid, November 1, 2003 - In the last hours, the e-mail worm Mimail.C is still spreading all over the world. However, it is not an epidemic right now. It has been affecting users from Spain, Uruguay, Chile, Bolivia and Venezuela (more information on
http://www.pandasoftware.com/).
As the virus is capable of launch DoS Denial of Service) attacks against web servers, it is possible that it activity will be increased at the beginning of the week. So, Panda Software recommends users to pay attention to this worm.
A new variant has appeared a few hours ago: Mimail.D. The behaviour of this new worm is very similar to the first variant W32/Mimail. It spreads via e-mail in a message with the following characteristics:
* Sender:
admin@%domain%
%domain% is the domain of the user's e-mail address.
* Subject:
Your account xxxxxxx
xxxxxxx is a group of random lower-case letters.
* Message:
Hello there,
I would like to inform you about important information regarding your
email address. This email address will be expiring. Please read attachment for details.
---
Best regards, Administrator
xxxxxxxx
* Attachments:
message.zip
* In addition, the message includes the high priority flag. Mimail.D searches for e-mail addresses, in order to send out a copy of itself using its own SMTP engine: Due to the incidents received with Mimail.C and the possibility of an increase in the number of infections caused for this or the new variant, Panda Software advises users to be extremely careful with e-mail messages received and to update their antivirus solutions immediately.
Panda Software has already released the updates, which ensure their
antivirus solutions detect and eliminate Mimail.C and Mimail.D. Users
can also detect this and other malicious code using the free, online
antivirus, Panda ActiveScan, which is available on the company's website at www.pandasoftware.com.
For more information about Mimail.C and Mimail.D, visit Panda Software's Virus Encyclopedia at the following address:
http://www.pandasoftware.com/virus_info/encyclopedia. NOTE: The addresses above may not show up on your screen as single lines. This would prevent you from using the links to access the web pages. If this happens, just use the 'cut' and 'paste' options to join the pieces of the URL.