There's a new worm using the RPC DCOM exploit - see http://vil.nai.com/vil/content/v_100559.htm

This one has a twist though.. it patches the infected PC with the MS patch 823980 and then deletes the MSBlast worm from the PC.

Odd, huh?