the MiMail.I Worm?
|MiMail.I and MiMail.J are mass mailing worms
that attempts to steal credit card information. They masquerade as a
PayPal Secure Application email similar to the following
YOUR PAYPAL.COM ACCOUNT EXPIRES
Attachment: paypal.asp.scr or www.paypal.com.scr
Dear PayPal member,
PayPal would like to inform you about some important information
regarding your PayPal account. This account, which is associated with
the email address
will be expiring within five business days. We apologize for any
inconvenience that this may cause, but this is occurring because all of
our customers are required to update their account settings with their
We are taking these actions because we are implementing a new security
policy on our website to insure everyone's absolute privacy. To avoid
any interruption in PayPal services then you will need to run the
application that we have sent with this email (see attachment) and
follow the instructions. Please do not send your personal information
through email, as it will not be as secure.
IMPORTANT! If you do not update your information with our secure
application within the next five business days then we will be forced
to deactivate your account and you will not be able to use your PayPal
account any longer. It is strongly recommended that you take a few
minutes out of your busy day and complete this now.
DO NOT REPLY TO THIS MESSAGE VIA EMAIL! This mail is sent by an
automated message system and the reply will not be received.
Thank you for using PayPal.
Does MiMail.I Worm Infect My System?
a file named svchost32.exe in the Windows directory along with a
temporary file and adds the following registry key to the system.
displays the following screen to try to steal credit card information
It then stores this information in
the file c:\ppinfo.sys and sends this information to four predetermined
addresses. After sending the information, it searches for email
addresses in the cached internet files on the computer and saves these
addresses to the file c:\windows\el388.tmp. It mass mails the virus to
Can I Remove the MiMail.I worm?
these steps in removing the MiMail.I worm.
Terminate the running program
- Open the
Windows Task Manager by either pressing CTRL+ALT+DEL on Win9x machines
or CTL+Shift+Tab and clicking on the Processes tab on WinNT/2000/XP
the following program, click on it and End Task or End Process
the Registry entries
- Click on
Start, Run, Regedit
- In the
left panel go to
- In the
right panel, right-click and delete the following entry
the Registry Editor
the infected files (for Windows ME and XP
remember to turn
off System Restore before searching for and
deleting these files to remove infected backed up files as well)
Start, point to Find or Search, and then click Files or Folders.
sure that "Look in" is set to (C:\WINDOWS).
- In the
"Named" or "Search for..." box, type, or copy and paste, the file
names: (these are all in the Windows directory)
svchost32.exe (in the Windows directory)
Find Now or Search Now.
the displayed files.
the computer and run a thorough virus scan using your favorite
Automatic Removal of MiMail.I and MiMail.J worms,
download the Symantec
Variations of this virus
Mimail.A Worm Removal
Tools for Removing Spyware, Adware, and Malware
Spyware/Adware Removal Help
MSBlast.exe Worm Removal
Welchia (Dllhost.exe and SVCHost.exe) Worm Removal
Uninstall McAfee Instructions
Uninstall Norton Instructions
Uninstall Avast Instructions
Uninstall AVG Instructions
Uninstall Antivir Instructions
Uninstall Panda Instructions
How to Manually Run the Microsoft Malicious Software Removal Tool
Bloodhound.Exploit.6 Virus Removal
MyDoom Virus Removal
MiMail.C Virus Removal
Swen Worm Virus Removal
SoBig.F Worm Removal
Dumaru Virus Removal
BugBear.B Worm Removal
SoBig.E Worm Removal
Pop Up Ad Removal Info
KAK Worm Removal
MiMail.A Worm Removal
W95.MTX Virus Removal
Snow White Virus Removal
BadTrans Trojan Removal
Wininit Virus (Bymer Trojan)
Happy99 Worm Removal
VBS Netlog Worm Removal
Pretty Park Worm Removal
Sasser Worm Virus Removal
Backdoor SDBot.H Trojan Removal
Computer Security Information
Back Orifice Information
PC HELL Main Page
iPadastic - News, Tutorials, Help, Tips, and Hints for the iPad
Download Hoyle Games
including Casino 3D, Card, Board, and Solitaire games.