Is this a virus?

I got a weird e-mail message saying that my software had been registered (I have no idea what it could have been referring to, legitimately). Attached was a suspicious file (siupd02.scr). A search of Google and of Norton's Web site turned up nothing. Could this be a new virus?

Anne

 

If you don't know who it's from, or don't recognise the file then definitely do not open it. Many people get these emails, they're so annoying but hey!

 

Sounds like this new one I got info on this morning. Don't open it!

Bagle.BK and Bagle.BL reach computers in email messages with spoofed sender
addresses and with subject fields chosen at random from a list of options.
Possible subjects include: "Delivery by mail" or "Delivery service mail".
The message text may include phrases like: "Before use read the help"
or"Thanks for use of our software". The message attachments, which actually
contain the worms, have variable names, although their extension is always
COM, CPL, EXE or SCR.

In order to spread via P2P applications like KaZaA or Morpheus, both worms
create -in the programs' shared folders- copies of themselves with names
such as ACDSee 9.exe, Adobe Photoshop 9 full.exe or Ahead Nero 7.exe, among
others. This is to bait other users into downloading them and then executing
them.

Regardless of how they reach computers, when a file containing either of the
worms is run, they use their own SMTP engine to send themselves to the email
addresses they find in files with certain extensions stored on the computer.
Nevertheless, they avoid sending themselves out to certain addresses,
principally those related to IT security software companies.

The most dangerous action that both variants of Bagle take is the
termination of processes in memory related to antivirus and security
applications, leaving computers defenseless against further attack.

They also make several entries in the Windows registry to ensure they are
run every time the system is started up and delete others that could exist
as the result of infection by variants of Netsky.