As a general rule . . . . . . check out http://www.symantec.com/enterprise/security_response/threatexplorer/threats.jsp when you get one of these. I've heard it said that hoaxes cost business more than virusus but in any case it's best to check it's genuine before circulating it. Not doubting your good intentions, obviously.