Threat Database Viruses XM.Mailcab@mm

XM.Mailcab@mm

By ZulaZuza in Viruses

Threat Scorecard

Ranking: 5,436
Threat Level: 20 % (Normal)
Infected Computers: 5,571
First Seen: March 6, 2012
Last Seen: September 20, 2023
OS(es) Affected: Windows

XM.Mailcab@mm is a dangerous mass-mailing macro virus that spreads by embedding itself into any open Microsoft Excel document on the corrupted PC system. XM.Mailcab@mm then transmits itself to all contacts in the Microsoft Outlook Address Book. XM.Mailcab@mm modifies the Windows Registry and monitors the compromised machine's clock and between the hours of 10:00 and 11:00, and 14:00 and 15:00 it strives to steal the Microsoft Outlook contact list. XM.Mailcab@mm then copies itself as a .cab file and forwards itself to all of contacts in the Microsoft Outlook Address Book. XM.Mailcab@mm also attaches a .vbs file to decompress the .cab file. Remove XM.Mailcab@mm before it harms your PC.

Registry Details

XM.Mailcab@mm may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\[VERSION NUMBER]\Excel\Security\"Level" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\[VERSION NUMBER]\Excel\Security\"AccessVBOM" = "1"

URLs

XM.Mailcab@mm may call the following URLs:

executive-story.com

Trending

Most Viewed

Loading...