Win32:MiMail-A
Win32:MiMail-A is a worm that spreads via email. It informs the user that his/her email address will expire soon and tries to convince him/her to open and run the attachment. It comes with the following subject line:
The attached file is message.zip and it is an archive which contains HTML file named Message.htm which contains the executable file and the script to run it. If executed, the worm copies itself to the following files
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\VideoDriver =C:\Windows\videodrv.exe avast! with VPS file dated on or after 2nd August 2003 is able to detect this worm. Refer: Avast
|