Well, much as I said a while ago, looks like that MS SQL snake is on the rise... incidents.org has provided a good handler's diary as well as some detailed analysis of the worm. So far I've not seen any analysis of the email program/client that the worm also uses (with so-called "additional functions").
Here's the link to the diary - I won't bother including the links to the detailed analysis... "left as an exercise to the reader."
