Trend shares a preliminary report of a new email worm designed to trick users by pretending to be a non-delivery error message of an earlier email that they may have sent out. Users should always be careful with these types of attachments.
CHOD.A email worm - uses non-delivery text to trick users
http://secunia.com/virus_information/16212/chod.a/
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FCHOD%2EA
FORMAT OF EMAIL TO BLOCK OR AVOID
Subject: (any of the following)
• Your computer may have been infected
• Warning - you have been infected!
Message Body: (any of the following)
• Your computer may have been infected Warning - you have been infected!
• Your message was undeliverable due to the following reason(s):
Your message could not be delivered because the destination server was unreachable within the allowed queue period. The amount of time a message is queued before it is returned depends on local configuration parameters.
Most likely there is a network problem that prevented delivery, but it is also possible that the computer is turned off, or does not have a mail system running right now.
Your original message has been attached.
Attachment: (any of the following)
• netsky_removal.exe
• removal_tool.exe
• message.pif
• message.scr