Possibly yet another MS mail worm

Sat Feb 28 00:12:42 UTC 2004

This one may be a variant of the recent worms.  It's spreading by way of
zipfile attachments.  I don't have more info yet, but my $orkplace has just
been hit by it and it's unknown to McAfee and Symantec at this time.

It's not W32.Netsky, as best I can tell, because of the attachment filename:
this one uses things like accabaacc.zip that are new to me.  I don't have
more info on it at this time, but will try to snare a sample in transit if
it hits my home system.

Just a heads-up,

-- 
-- Todd Vierling <tv at duh.org> <tv at pobox.com>