12/8: Maslan-C Worm Spreads By Email
December 8, 2004

W32/Maslan-C is worm that spreads by emailing itself to addresses found on the infected computer. The worm also spreads to network shares with weak passwords and to computers vulnerable to the LSASS exploit (MS04-011) and RPC-DCOM exploit (MS03-039).

W32/Maslan-C copies existing executable files on the computer to a new location called "___b" and places copies of the worm where the original files used to be.

More information can be found at Sophos page.