'Here You Have' Virus Tries to Delete Your Security Software - PCWorld

Subject: Here you have (or “Just for you”)

Body: This is The Document I told you about, you can find it

Here. [link]

Please check it and reply as soon as possible.

Cheers,

source PCWorld

That's the example of the worm that the url will bring you to a .scr file instead of .pdf file. Then, it installs itself as CSRSS.EXE in the Windows directory, e-mails the contents of your address book and spreads through mapped drives, remote machines, and removable media. Then it attempts to download files and delete security software.

How To Avoid The Virus

1 - Golden rule, don't just click any link, even from known senders.
2 - Update your antivirus software so it will be able to handle 'Here you have' worm.
3 - If infected, disconnect from the Internet, install any latest antivirus and try to remove the worm.