I have your answer Jeff this virus was launhced On January 4, 2005. Its a Trojan worm that exploits wmf. Its a scary one because the email will address you by Your first name.
What happened a couple of months ago Microsoft finally found a hole in their firewall, which has been there for years. I knew about this long before microsoft. Microsoft released a patch for it in December, 2004 for those people who did not updated are acceptable to theses kinds of attacks. After some malcious hackers heard the announcement from microsoft they lauched a new virus campaign. The automatic update feature for this patch does not work. You have to go right to Microsoft.
The hole allowed access to would be malcious hackers, spyware distributors to totally take over your computer.
I have the newest patch also but after running some checks it too has holes. But install the newest patch, Go back to your anti virus program find the virus it deleted. Get the path name run a search to make double sure its gone.
The program I use copied many IP’s but I will not post them here. I believe the Virus was lauched in the U.S from a School Campus. I hope this helps. greek39