Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 17 November 2003 23:56:51 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
Please read the instructions for removing W32/Mimail-J.
More Information
W32/Mimail-J is a worm very similar to W32/Mimail-I. This variant tries to get you to give up your credit card details, just like W32/Mimail-I, but also asks you for additional personal information such as your Social Security Number and your mother's maiden name.
W32/Mimail-J drops itself to your Windows folder using the names SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in your root directory using the names pp.hta and index2.hta. These web pages include scripts which ask you for the personal information described above.
