Virus warning

[Steve Fernandez <franline eth net>]

        I found a virus on my system today, probably a new one, which
bypassed all my antivirus software, and since all of you have your email
ids in my address book, you all are potential targets, and so I'm
sending this warning to you.

        I received this virus twice in the past two days, from two
people completely unknown to me. The virus selects a random subject each
time it retransmits itself, but I've got the same message content on the
two occasions. The message content is:-


"Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"


        After receiving this email, which has an attachment about
120-140 KB in size, I noticed unnecessary traffic over my internet
connection. Also, two new threads, called Sirc32 and pstores, showed up
on the system (does not appear in the CTRL+ALT+DEL task list) When I
searched in my registry, I found that HKEY_LOCAL_MACHINE - Software -
Microsoft - Windows - CurrentVersion - Run (it's in one of the Run*
folders) has a key called "Driver32" which instructs my system to run a
file called C:\RECYCLED\TEST.EXE (you will find two .EXE files hidden in
your C:\RECYCLED directory) I have removed all these files from my
system. I advise you to take a backup before you do anything.

Good Luck.

Regards,
Steve Fernandez.

begin:vcard 
n:Fernandez;Steve
tel;home:0091-484-234155
x-mozilla-html:TRUE
org:Model Engg. College
version:2.1
email;internet:franline eth net
adr;quoted-printable:;;'Franline', Hno 22/580,=0D=0AEdacochin, Kerala,=0D=0AIndia - 682006.;Cochin;Kerala;682006;India
x-mozilla-cpt:;17120
fn:Steve Fernandez
end:vcard

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature