New unknown email virus???

[tk421]

Friend of mine called me up this morning asking if I had sent him an email with attachments. I hadn't, and he proceeded to tell me the symptoms of what looks like a virus:

attachments: screen.htm and display.scr
subject: you clear key
crippled his system by running a process called "winkmh". once he stopped that process, things seem ok, but he can't access the task manager anymore.

can't find any info about this virus on trend micro's, mcafee's, or norton's sites.

I have scanned both my home and work computers, the only ones i use, and haven't come up with any viruses. both machines already had nav2002 and most current updates. i have no items in my sent items folder (outlook 2002) that match the description of the email my friend received.

any ideas?

[NooNoo]

Would suggest that you submit the information you have so far to Norton and to Trend and see if they can help.

Have also seen virii deactivate Norton, so that it looks like its running, but isn't. Try the online scan at <a href="http://housecall.antivirus.com" target="_blank">http://housecall.antivirus.com</a> if you are on dialup, go make coffee and lunch while it loads.

[emr]

Out of interest tk421, does your friend have up to date anti virus running and, if so, can he scan the files he "received" from you?

If not, perhaps he could send then on to Symantec (or another anti virus vendor) for them to examine and advise.

[tk421]

he doesn't have any av prog at all. i will probably submit this info to symantec. thanks.

[emr]

Let us know the outcome, best of luck.