PureBasic Forums - English

Dear PayPal member,

We regret to inform you that your account is about to be expired in next five business days. To avoid suspension of your account you have to reactivate it by providing us with your personal information.

To update your personal profile and continue using PayPal services you have to run the attached application to this email. Just run it and follow the instructions.

IMPORTANT! If you ignore this alert, your account will be suspended in next five business days and you will not be able to use PayPal anymore.

Thank you for using PayPal.

W32/Mimail-J is a worm very similar to W32/Mimail-I. This variant tries to get you to give up your credit card details, just like W32/Mimail-I, but also asks you for additional personal information such as your Social Security Number and your mother's maiden name.
W32/Mimail-J drops itself to your Windows folder using the names SvcHost32.exe and ee98af.tmp. It also creates fake PayPal web pages in your root directory using the names pp.hta and index2.hta. These web pages include scripts which ask you for the personal information described above.