Signature Detail

WORM: Mimail.A Attachment

This signature detects the Mimail.A worm attachment in SMTP traffic. After infecting a Windows-based host, Mimail collects the host's e-mail addresses and sends itself as an attachment to these addresses using its own SMTP engine; thereby spreading itself over the Internet.

Extended Description

Mimail.A is a worm that infects Microsoft Windows operating systems. It collects e-mail addresses from an infected system and uses its own SMTP engine to send e-mail messages out from the system.

References

• URL: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.A
• URL: http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?idvirus=40328
• URL: http://www.cert.org/incident_notes/IN-2003-02.html