http://vil.nai.com/vil/content/v_99897.htm

Yet another worm that spreads across default shares , intrestingly actually uses the windows 2000 netbios ports (445).

Just a heads up,

/nebulus