Overall risk rating: Medium
Damage Potential: High
Distribution Potential: High
Trend Micro Pattern file required: 667
A fast spreading worm (WORM_MIMAIL.C) entices recipients to open the message by using the subject of sex.
Following the receipt of several infection reports, TrendLabs Europe has declared a yellow alert for this high risk worm.
This memory-resident Internet worm propagates through email using its own Simple Mail Transfer Protocol (SMTP) engine. The email arrives in the following format:
To: admin@???
Subject: Re[2]: our private photos ???
Message Body:
Hello Dear!,
Finally i've found possibility to right u, my lovely girl :) All our photos which i've made at the beach (even when u're without ur bh:)) photos are great! This evening i'll come and we'll make the best SEX :)
Right now enjoy the photos.
Kiss, James.
??? (Note: ??? is a variable string)
Attachment: "photos.zip"
The worm runs in Windows 95, 98, ME, NT, 2000 and XP.
For removal instructions, and details on how to protect systems, please visit http://www.trendmicro-europe.com
- Ends –
About Trend Micro
Trend Micro is a leader in network antivirus and Internet content security software and services. The Tokyo-based corporation has its European headquarters in Marlow, England, and business units worldwide. Trend Micro products are sold through corporate, value-added resellers and managed service providers. For additional information and evaluation copies of all Trend Micro products, visit: http://www.trendmicro-europe.com
Trend Micro and the t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company or product names may be trademarks or registered trademarks of their owners.
###
For further information, please contact:
Elizabeth Blanch
Trend Micro
T. +44 (0)1628 400 513
E. elizabeth_blanch@trendmicro.co.uk