Re: New Worm - W32.Mimail.J@mm (PayPal)

[Tracey Losco <tracey.losco () NYU EDU>]

There's a good removal tool at:

http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.removal.tool.html

If you've already been hit with it.

Regards,

Tracey

--------------------------------------------------------------------
Tracey Losco
Network Security Analyst                security () nyu edu
ITS - Network Services          http://www.nyu.edu/its/security
New York University                     (212) 998 - 3433

PGP Fingerprint: 8FFB FE47 6156 7BF0  B19E 462B 9DFE 51F5


At 8:34 AM -0500 11/18/03, Gerry Sneeringer wrote:
> Hardly a whisper on this one so far.  It's very similar to the "I"
> variant which also pretended to be from Paypal (we sent out a
> warning about bogus PayPal messages last week to FYI).  The
> message looks really fishy, so most of our gullible users appear
> to be recognizing it for what it is.
>
> -G
>
> On Mon, 17 Nov 2003, Krizi Trivisani wrote:
>
> >  Hello,
> >
> >  This one just starting slipping by our email virus filters... just
> >  thought I'd give a heads-up.
> >
> >  http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.j () mm html
> >
> >  Krizi
> >
> >  **********
> >  Participation and subscription information for this EDUCAUSE
> > Discussion Group discussion list can be found at
> > http://www.educause.edu/cg/.
>
> **********
> Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.