Just a heads up on this piece of malware as you may have read about
this in Computerworld or another news source.
winnow sigs distributed as part of sanesecurity have been detecting
the scam email as well as their changing payloads housed on fast flux
domains for almost 2 weeks
See:
http://www.computerworld.com/s/article/9138527/IRS_scam_now_world_s_biggest_e_mail_virus_problem?source=CTWNLE_nlt_dailyam_2009-09-28
Tom
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml