RE: WORM_MIMAIL.A Anyone have any info on what this does yet?

From: Schmehl, Paul L (paulsat_private)
Date: Fri Aug 01 2003 - 11:16:34 PDT

  • Next message: Dave Paris: "RE: Scan of TCP 552-554" 

    <http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.a@mm
.html>

We're blocking message.zip at the gateway.

Paul Schmehl (paulsat_private)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

> -----Original Message-----
> From: Danny [mailto:drh26at_private] 
> Sent: Friday, August 01, 2003 12:56 PM
> To: incidentsat_private
> Subject: WORM_MIMAIL.A Anyone have any info on what this does yet?
> 
> 
> We are getting flooded with these little puppies, does anyone 
> have any  
> additional info on what this thing does once it infects a 
> host? I'll be infecting a box to test myself after i send 
> this email but if  
> anyone has done testing already it would great to hear your input.

---------------------------------------------------------------------------
----------------------------------------------------------------------------

    This archive was generated by hypermail 2b30 : Fri Aug 01 2003 - 11:43:49 PDT