[Dshield] Mydoom Back?

[Jon R. Kibler]

All,

I have seen a half dozen emails to various users containing Worm.Mydoom.M in the past 24 hours. Prior to that, the last time we saw it were single occurrences in August and November of last year.

They are all coming from the same DSL IP in ZA: 196.209.50.188

They are all known variants:
	Subject: uo	Attach: File.scr
	Subject: Message could not be delivered		Attach: readme.zip
	Subject: Delivery reports about your email	Attach: text.zip

Anyone else seeing this?

Jon K.
-- 
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
m: 843-224-2494




=========================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.