What always suprises me is that I send out a warning to all employees on the first mention that one of these virus's are going arround...(I sent this warning out yesterday morning ) and ususlly withing a few hours of the warning, people get their email, and still try to open files... just another hour or two that I can't program, becuase then I am providing tech support on how to clean up their computer. Yuck Yuck..... time to outsourse that stuff now I think.
Bob Lee


<snip> I got one with a *.com.pif extension and one with xls.lnk.
>What is interesting is that the worm also sends out random files from the victim's PC. If you have a hex editor you can read both the worm and the 'cover' file.