I read somewhere that people (using the term advisedly) are now making pages that look just like the real thing; and that if you get one of these "alerts" you should not open it or click on its enclosed link whatever you do--this initiates the virus--but rather type the address of the real Yahoo, MSN or whatever in the box yourself, or use your own link, and then check the validity of your notice.