I have recived a mail from debian-chinese list with an attachment ScreenSaver ,it is an worm ,don't open it (if u use debian,i think it will not do you harm. :P) it will copy itself to $win\System32\Mstask32.exe &exeloader.exe,and an entry into REG\HKLM\M$\Win\Run,bind with filetype exefile in explorer.