It sounds like it might be the new Swen worm. According to Symantec: The worm can also impersonate mail delivery failure notices, attaching itself as a randomly named executable.
One example is: I'm sorry I wasn't able to deliver your message to one or more destinations. http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] Regards, Mary Landesman Antivirus About.com Guide http://antivirus.about.com ----- Original Message ----- From: "Ron Clark" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 19, 2003 10:38 AM Subject: [Full-Disclosure] new virus: Has anyone seen an email going around with subject bug message containing a supposed audio attachment that is really an exe named ckcwr.exe. Is this a possible new virus? I have recieved numerous cpoies of this email since last night. Ron Clark System Administrator Armstrong Atlantic State University _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
