Livra worm spreading
The W32/Livra worm is Windows specific. Among other things, it steals passwords and emails them to a location in Russia. Look for the subject lines "Avril Lavigne - the best," "Reply on account for IIS-Security," and "According to Daos Summit."
Attachments include "AvrilSmiles.exe," "AvrilLavigne.exe," "resume.exe," and "Readme.exe."
UPDATE: Here's more on additional WinWorms going around.
