W32.Toyep.A - New EMAIL worm uses ZIP extensions
W32.Toyep.A - New EMAIL worm uses ZIP extensions
http://secunia.com/virus_information/31444/toyep/
http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5719-99
QUOTE: It gathers email addresses from the compromised computer and use its own SMTP engine to send itself to the email addresses that it finds. The email has the following characteristics. The main danger is secondary EXE based virus attack downloaded from a hostile website.
EMAIL TO AVOID
From: [Spoofed]
Subject: [varies]
Attachment: message.zip, data.zip, logfile.zip