[Mimedefang] New worm : from james at xxxxx with photos.zip attachment

[Justin]

On Fri, 31 Oct 2003, Stephane Lentz wrote:
> Anybody noticed a new worm today ?
> Messages get sent with james at xxxx (xxxx being a domain
> chosen dynamically I guess based on the recipient address)
> which photos.zip as attachment ?
> photos.zip contains an attachment photos.jpg.exe.
> It does not seem detected by virus vendors yet.
> Watch your logs for messages sent by some james@ ....

http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.c@mm.html

-Justin