[Bill V]

Thanks for the timely info guys. I got one this morning entitled test with a sent date of 1/26/04. I knew something was awry because I didn't send it. There was no attachment though because we strip all files with the afore mentioned extensions from all SMTP traffic.

Then a user called saying that someone outside the organization had received something from her entitled hello. I ran a scan with PANDA and found nothing.

A few minutes later I spotted this thread and, voila!

By the way, according to Symantec, this thing is set to launch a Denial of Service attack on Feb. 1, 2004. It also has a trigger date to stop spreading on Feb. 12, 2004.