If you receive an email (varying subject line) that includes the following message, be warned!

"I received your email and I shall send you a reply ASAP.
Till then, take a look at the attached zipped docs."

The subject line is not constant as the message is a reply. The worm (named "zipped_files.exe") is attached, with a file size of 210,432 bytes. The file has a Winzip icon which is designed to fool unsuspecting users to run it as a self-extracting file. User who run this attachment will be presented with a fake error message that says

"Cannot open file: it does not appear to be a valid archive. If this file is part of a ZIP format backup set, insert the last disk of the backup set and try again. Please press F1 for help."

The virus then searches for all files and replaces them with 0 block files:

.c
.cpp
.h
.asm
.doc
.xls
.ppt

If you get the virus: www.nai.com have a fix.

Wanted to let you know!

John