New worm?

[BlueBoar () THIEVCO COM (Blue Boar)]

I received two copies of this worm-looking thing this morning.  I don't
have time to look myself before I head out, but I thought the list
might be interested.  The second copy looks like someone who got it
themselves and wants to know what it is.

Attached is a zip, and inside it is another zip of the two files
wrapped in their original mail headers.. so it should be pretty
safe unless you go out of your way to run them.  In which case,
caveat subscriber.

It looks like VBScript, and has a .vbs extension, and diddles
with reg keys, so I assume it's after windows boxen with WSH
installed.

                                BB

<HR NOSHADE>
<UL>
<LI>application/x-unknown-content-type-WinZip attachment: worm2.zip
</UL>