maybe this should be on sec focus but.

[Drew Weaver <drew.weaver () thenap com>]

            I have had like 4 users call and tell me that they're receiving
email from admin@ourdomainname with a unidentified attachment, possibly a
worm that exploits the new Microsoft vulnerability last week, all 4 of these
people reported that their updated this morning antivirus software missed
it.

 

FYI.