PCWorld: Beware Fast-Spreading E-mail Worm
The worm uses a phishing message with a link, apparently to a requested PDF file, and attempts to disable the target computer’s security software.
“Security experts warned Thursday of a fast-spreading e-mail worm, the first large outbreak of this type in nearly a decade.
The worm appears in e-mail messages with the subject “Here you have,” and contains what seems to be a link to an Adobe PDF file. In fact the link takes the victim to a Web page hosted on the members.multimania.co.uk domain that then tries to download a screensaver (.scr) file. If the user agrees to installing that file, he is then infected by the worm, which mails itself to his e-mail contacts.”