Dette gjør ormen:
Når en maskin er infisert vil den forsøke å koble seg opp mot register.com for å sjekke forbindelsen. Deretter vil den samle alle e-post adresser den finner på maskinen og opprette en egen SMTP for å sende ut meldingene. Ormen vil også starte en rekke DoS angrep mot forskjellige nettsteder.
Mimail ormene sprer seg hurtig vi e-post og for november målingen til Messagelabs var 5 varianter av denne ormen inne blant de 10 mest spredende ormene for hele måneden.
Slik kjenner du igjen ormen:
Avsender: Wendy (domenet kan variere)
Emne: Re We are going to bill your credit card:
Størrelse: MiMail.L 11,3 KB Mimail.M 10,8 KB Sleve meldingen: (variant l og m)
Hi Greg its Wendy.
I was shocked, when I found out that it wasn't you but your twin brother!!! That's amazing, you're as like as two peas. No one in bed is better than you Greg. I remember, I remember everything very well, that promised you to tell how it was, I'll give you a call today after 9.
<... omitted ... >
I'm so thankful to you, for acquainted me to your brother. I think we can do it on the next Saturday all three together? What do you think? O yes, as you wanted I've made a few pictures check them out in archive, I hope they will excite you, and you will dream of our new meeting...
eler (variant L):
Good afternoon, We are going to bill your credit card for amount of $22.95 on a weekly basis. Free pack of child porn CDs is already on the way to your billing address. If you want to cancel membership and your CD pack please email order and credit card details to firstname.lastname@example.org
Are you ready for all types of underage porn? We have the best selection for every taste!
Just click the secret links below and have fun:
Nude boys under 16! Nude girls under 16! Incest, a daddy & a daughter! We have everything you have ever dreamed for!