Be really careful opening attachments. This new MyDoom virus is spreading faster than anything we've ever seen. I have received the virus 6 times this morning in e-mails sent to my ARRL.ORG e-mail address. The e-mail is much better written than most, so it's fooling lots of people. One estimate is 1000 new infections per minute. Some descriptive information appears below.

Here's a good article from eWEEK magazine: MyDoom E-Mail Worm Spreading Quickly

Extract from the Sophos web site.
We started seeing these viruses late Monday afternoon.

W32/MyDoom-A and W32/MyDoom.A

   Type:
   Win32 worm

   Description

   W32/MyDoom-A is a worm which travels by email. The worm harvests email
   addresses from your hard disk and uses randomly-chosen addresses for
   both the "to" and "from" fields. This means that the "from" address is
   spoofed and does not tell you where the mail really came from.

   W32/MyDoom-A arrives in emails with the following characteristics:

   Subject lines include:
   error
   hello
   hi
   mail delivery system
   mail transaction failed
   server report
   status
   test
   [random collection of characters]

   Attachment names include:
   body
   data
   doc
   document
   file
   message
   readme
   test
   [random collection of characters]

   Attachment extensions:
   bat
   cmd
   exe
   pif
   scr
   zip

   W32/MyDoom-A attaches itself to emails in either EXE (Windows program)
   or ZIP (Zip archive) format.

73,
Andy Oppel, N6AJO
Vice Director, Pacific Division, ARRL

n6ajo@arrl.org
home: (510) 864-2299
cell: (510) 910-1508