New variant of Virus ?

["Hubbard, Dan" <dhubbard () websense com>]

It looks like there maybe a new variant of the virus MyDoom worm. We
have seen the following:

RE: I still love you  fLctv 

Error 551: We are sorry your UTF-8 encoding is not supported by the
server, so the text was automatically zipped and attached to this
message.

The file attached is message.zip and unzips to message.exe

I am analyzing the file for behavior and will update, but has anyone
else seen this yet ?

The latest Nassoc DAT does not cover this.




---------------------------------------------------------------------------
----------------------------------------------------------------------------