A new variant on the Lovgate worm began spreading early Monday, posing as an authentic-looking business e-mail, according to security researchers.
Lovgate.C spreads from an infected machine using the MAPI Windows functions by answering recent mail with an infected reply. The worm comes packaged in mail with the subject: "I'll try to reply as soon as possible. Take a look to the attachment and send me your opinion!"
The worm affects Microsoft Corp. Outlook and Outlook Xpress users on Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP and Windows Me operating systems.
"Lovgate is one of the largest cases we've seen this year, and is still gaining ground."
http://www.eweek.com/article2/0,3959,901393,00.asp - kbeartx