The Mimail worm is a mass-mailing email worm arriving in an email carrying the message.zip attachment . Contained within the .zip file is message.html which carries an embedded executable that will run when the .html file is opened. The worm exploits a vulnerability in Microsoft products and uses the same proof of concept code from the disclosure of that vulnerability.