What is it??

[stefanus]

Have just accessed my OE in box and found this item awaiting. Did not recognise it and deleted it. It was. PayPal.Com IMPORTANT ionguao 01/12/03 17:59
Any Ideas?
Stefanus

[jabarnutcase]

My guess is that it was just some crap mail that deserved to be deleted. :D

I do know that Paypal would not send an email that looked like that. Sometimes, some of that stuff marked "IMPORTANT" is just waiting to unleash terror on those who open it.
Don't worry, be happy. :p

[shanmuga]

You have done the right thing stefanus, It is the W32Mimail worm. W32.Mimail.J@mm is a mass-mailing worm which attempts to steal personal information. The worm displays a series of forms which ask the user to enter their credit card information.That email has nothing to do with paypal. It also goes by the following names among various others.
PayPal.com: "IMPORTANT unauhigh",
PayPal.com: "IMPORTANT vhavnrin",
PayPal.com: "IMPORTANT lfolccfc",
PayPal.com: "IMPORTANT oygomkom"

[stefanus]

Thanx guys! Would you believe it the thing is back:( But was dealt with. With Extreme Prejudice ;). That is another one to add to the list of W32.Mimail It had the prefix ox9kb10b.How did it get past Mailwasher etc??? Aha! It did`nt Just checked again and there was a message saying the attachment had been removed.
:D The wonders of the PC World never cease to amaze me
Stefanus

[mjc]

Unless your ISP starts filtering or puts an AAV on the mail server expect a number of them, as they will only keep coming. Also there is achance that someone you know is infected. So start with family first, having them check for viruses.

[stefanus]

MJC. Will do that, recently changed my e-mail add, and have not given it to any family member, oops just one my youngest daughter, Stephanie?? Is there a removal tool somewhere??
Stefanus

[stefanus]

I asked my ISP people to block this thing and this is there reply ( We already know what it is :cool: ) But how do we block it???
Hope this helps!!


Dear Mr Murray,

Thank you for your email,

This looks like a manifestation of the W32.swen virus.

If you are having problems with the this virus affecting your e-mails

then go to the following link , and removal tool...



http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
Regards,

Shona Clark
OneTel Support

The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed

Any theories

Stefanus:D