MIMAIL-I WORM

The Mimail-I Worm is a mass mailing worm that arrives disguised as a PayPal email notification. The attachment name is www.paypal.com.scr and the subject name is "YOUR PAYPAL.COM ACCOUNT EXPIRES"


REMOVAL INSTRUCTIONS:

• Run REGEDIT and delete the value:
  • "SvcHost32"="C:\\WINDOWS\\SvcHost32.exe"
    in registry key:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CurrentVersion\Run]
• Delete the files
  • C:\windows\ee98af.tmp
  • C:\pp.hta
  • C:\pp.gif
• Run Vbuster.Exe and use it to delete all occurances of the worm

Return Home