What is W32.Mimail.C@mm and how does it affect me?
The W32.Mimail.C@mm worm is a variant of W32.Mimail.A@mm that spreads by email and steals information from infected computers.

The email has the following characteristics:

Subject: Re[2]: our private photos [random string of letters]
Attachment: photos.zip

Note: Photos.zip contains only one file, photos.jpg.exe. This zip uses a code-base exploit to create and execute a copy of photos.jpg.exe in the Temporary Internet Files folder. The compression method of this file inside the zip file is stored so that compression is not used at all.

For more information about this vulnerability and a Microsoft patch, read the Microsoft Knowledge Base Article 3300994. We encourage system administrators to apply the Microsoft patch to prevent infection by this worm.

For more technical information, refer to the W32.Mimail.C@mm writeup at: http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.c@mm.html.

What action can I take from here?

RUN LIVEUPDATE - Symantec Security Response posted virus definitions to protect against this threat on October 31, 2003 (via LiveUpdate). All users of Norton AntiVirus who do not have up-to-date virus protection should immediately run LiveUpdate for protection from W32.Mimail.C@mm.

Virus definitions are available via the LiveUpdate feature in the Norton AntiVirus product or the Symantec Security Response Web site.

Symantec Security Response encourages all Norton AntiVirus users to regularly download virus definitions in order to protect against future threats. For more information on how to run LiveUpdate, please click here.

UPGRADE CUSTOMERS - If you have an older version of Norton AntiVirus and would like to upgrade to Norton AntiVirus 2004, please click here.

NEW CUSTOMERS - If you would like to purchase Norton AntiVirus 2004, please click here.

Sincerely,

Symantec Security Response Team
Symantec Corporation

Special Offers!
Visit the Symantec Store Web site for comprehensive security solutions and special Symantec promotions. Click Here
For non-English product versions, please visit our global store.

Protect your PC!
For around-the-clock virus protection purchase Norton AntiVirus™ 2004 today!
 

*Plus shipping. Suggested offer is valid in US only. Prices may vary. With your purchase of Norton AntiVirus 2003, you qualify for one year of virus definitions via LiveUpdate™. Subsequent renewals are available through an annual subscription.

Microsoft, MSN, Windows, Windows NT, and the Windows logo are registered trademarks of Microsoft Corporation. Other brands and products are trademarks of their respective holder(s). Copyright © 1995-2003 Symantec Corporation. All rights reserved.

You have received this message because you have registered to receive virus notifications from Symantec and/or information on Symantec products.

DO NOT REPLY TO THIS MESSAGE. This email account is for sending messages only. If you require Customer Service or Technical Support, please check the Symantec Web site for contact information at www.symantec.com.

To unsubscribe to this broadcast email, please click here.

For information on Symantec's Privacy Policy, please click here.

For information on Symantec's Return Policy, please click here.

Symantec Corporation, 20330 Stevens Creek Boulevard, Cupertino, CA 95014