Tuesday, November 25, 2008

Win32.Small.aglf


Subject: Re: F.C.U. Doc 2
Attachment: Doc_N012.zip
AVs: 4/37(10.82%) kas, mca, art, sop



Hello, (recipient's name)

We send the updated report.
Ssory for a delay.
Look the attached file.

Tel: 304361 (number varies)
--
Best regards,
Int. F.C.U. mailto:****@skynet.be
(mailto: matches forged sender)

Monday, November 24, 2008

TR/Dldr.iBill.BR


Subject: Abrechnung 462935278414 (number varies)
Attachment: abrechnung.zip
AVs: 3/37(8.11%) ant, cat, tre

Sehr geehrte Damen und Herren!
Die Anzahlung Nr.116856974966 (number varies) ist erfolgt
Es wurden 3421.00 (amount varies) EURO Ihrem Konto zu Last geschrieben.
Die Auflistung der Kosten finden Sie im Anhang in der Datei: Abrechnung.

Regel Inkasso GmbH & Co. KG
Fredeburger Str. 21
33699 Bielefeld

Postfach 51 20 05
33698 Bielefeld

Tel.: 0521 93212-0
Fa x: 0521 92412-15

AG Bielefeld HRA 13169
Steuer-Nummer: 349/5749/0377

Komplementargesellschaft:
Regel Verwaltungs-GmbH
AG Bielefeld HRA 34932

Thursday, November 20, 2008

W32/FakeAlert.IGU!tr


Subject: Your Tracking # 674778812254 (number is random)
Attachment: UPS.zip
AVs: 1/36 (2.78%) for

Sorry, we were not able to deliver postal package you sent on November the 1st in time
because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.
If you do not receive package in ten days you will have to pay 36$ per day.

Your UPS

Friday, November 14, 2008

X.Win32.AutoRun.sgv


Subject: Your Flight Ticket N 45491 (number varies)
Attachment: Online_Ticket.zip
AVs: 4/36 (11.12%) kas, mca, sop, the

Good day, (greeting varies)
We appreciate deeply your decision to get our new service - "Purchase your airplane ticket On-line" on our website.
You have just created your account:

Login: xxxxxxx@xxxxxx.com (recipient's email)
Password: PASSC4D4 (last 4 characters are random)

Your credit card has been charged for $811.49. (random $800 amount)
We are glad to inform you that each time you are getting airplane tickets with the help of our site you are given a reduction of 15%!
In the ZIP archive added to this letter you can find purchase Invoice and your airplane ticket. So just colour print the ticket and start your wonderful journey!

Good luck,
USA3000 Airlines

X.Troj/Invo-Zip.parcel


Subject: Tracking Number 65693626711(Varies)
Attachment: UPS_letterN314617.zip
AVs: 4/36 (11.12%) Fo, Mc, So, The

Body:
Unfortunaly we couldn’t carry you the postal parcel sent on 28, October at the right timeas there is an incorrect recipient’s address.
To take your package back you should print the copy of invoice that is in the added file
George Barton
Manager UPS

Thursday, November 13, 2008

X.Trojan.Kobcka.GZ


Subject: Your flight ticket, Your airplane ticket, Your ticket from Allegiant Air (airline varies)
Attachment: ticket.zip
AVs: 7/36 (19.45%) bit, for, gd, mca, sop, the, vir

Good evening (greeting varies)
Thank you for using our new service "Buy airplane ticket Online" on our website.
Your account has been created:

Your login: jenny@XXXXXXX.com (recipient's email address)
Your password: PASSQ933 (last 4 characters vary)

Your credit card has been charged for $473.97. ($400 dollar amount varies)
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards,
Allegiant Air (airline varies)

X.Troj/Invo-Zip.trax

Subject: UPS Tracking Number 49682688430
Attachment: letter_UPS_N46765.zip
AVs: 7/36 (19.45%) Bit, For, GD, Mc, So, The, Vi
Body:
Unfortunately we were not able to deliver postal package you sent on Oct the 28 in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office

Your UPS

Wednesday, November 12, 2008

X.Win32.Invo.c


Subject: Your Tracking # 130914850813 (random number)
Attachment: UPSInvoice_76612.zip
AVs: 1/36 (2.78%) sop

Sorry, we were not able to deliver postal package you sent on November the 1st in time
because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.
If you do not receive package in ten days you will have to pay 36$ per day.

Your UPS

X.Win32.Invo.c

Subject: Your Tracking # 130914850813 (random number)
Attachment: UPSInvoice_76612.zip
AVs: 1/36 (2.78%) sop

X.TrojanSpy:ups_Zbot

Subject: Your Tracking # 997569144442 (Varies)
Attachment: UPSInvoice_90001.zip
AVs: 6/36 (16.67%) Au, F-P, Mi, Pa, Se, So

Body:
Sorry, we were not able to deliver postal package you sent on November the 1st in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 36$ per day.
Your UPS

X.Win32.Invo.b


Subject: Contract of order fulfillment, Contract e-fulfilment, Record in debit of account, Charge to account, Permission for resignation, Rent contract, your new employment contract, Start a personal account, Lending Contract
Attachment: contract_N45.zip
AVs: 5/36 (13.89%) ava, gd, mca, sop, the

Dear customers, (greeting varies)
We’ve drew up the contract taking into account those paragraphs you’d wanted.
Our legal experts made some recasts on the last page of the contract. Please, get to know with it, and if everything is ok we are prepared to pay for the first lot on Friday
The prepared contract is in the added file

We also can send the contract by fax
Waiting for your reply

X.W32/Eldorado.lett


Subject: Tracking Number 00681503431
Attachment: letter_UPS_N58472.zip
AVs: 14/36 (38.89%) An, Au, Av, Cl, F-P, GD, Ik, Mc, Mi, Pr, Se, So, Sy, The
Body:
Unfortunaly we couldnt carry you the postal parcel sent on 28, October at the right timeas there is an incorrect recipient’s address.
To take your package back you should print the copy of invoice that is in the added file
Your UPS

X.Win32.Invo


Subject: Contract of order fulfillment, Contract e-fulfilment, Record in debit of account, Charge to account, Permission for resignation, Rent contract, your new employment contract, Start a personal account, Lending Contract
Attachment: contract.zip
AVs: 12/36 (33.33%) ant, aut, ava, fp, gd, ik, mca, mic, sec, sop, sym, the

Good morning

We’ve drew up the contract taking into account those paragraphs you’d wanted.
Our legal experts made some recasts on the last page of the contract. Please, get to know with it, and if everything is ok we are prepared to pay for the first lot on Friday
The prepared contract is in the added file

We also can send the contract by fax
Waiting for your reply

Tuesday, November 11, 2008

X.Mal/EncPk-PS

Subject: Your Tracking # 530372185150
Attachment: UPSInvoice_019002.zip
AVs: 5/36 (13.89%) Au, Av, F-P, GD, So
Body:
Sorry, we were not able to deliver postal package you sent on November the 1st in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 36$ per day.

Your UPS

X.W32/Zbot.BOH


Subject: Your Tracking # 0760983212
Attachment: UPSInvoice8771.zip
AVs: 9/36 (25%) Av, Bi, F-S, Fo, GD, Ka, No, So, Vir

Body:
Sorry, we were not able to deliver postal package you sent on October the 19th in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 6$ per day.
Your UPS

X.W32.Auraax


Subject: your new employment contract, Charge to account, Rent contract, Contract of order fulfillment, Permission for resignation, your new employment contract, Start a personal account, Record in debit of account, Lease contract, Contract e-fulfilment
Attachment: contract.zip
AVs: 12/36 (33.33%) ant, aut, fp, fs, ik, kas, mca, mic, sec, sop, sym, the


Good day

We have already made ready the contract and we also joined some points you’d asked to add to it.
The lawyers change some points on the last page. Read the contract, please, and if there are no objections from your part we can pay for the first batch on Friday.
You can find the contract in the attached ZIP Archive.

We also ready to send it by fax if you need
Expecting for your decision

Monday, November 10, 2008

X.Contract.PW/1110b


Subject: Contract e-fulfilment, Charge to account, Your new labour contract, Open an account, Start a personal account, Lease contract, Rent contract, Contract of retirement, Contract of order fulfillment, Contract of order fulfillment
Attachment: Contract1.zip
AVs: 3/36 (8.34%) fs, kas, sun


Good evening (greeting varies)
We have already made ready the contract and we also joined some points you’d asked to add to it.
The lawyers change some points on the last page. Read the contract, please, and if there are no objections from your part we can pay for the first batch on Friday.
You can find the contract in the attached ZIP Archive. (Password is: contract)

We also ready to send it by fax if you need
Untill we meet again
(closing varies)

X.W32/Trojan-Gypikon-based.BA!


Subject: Your Tracking # 2671698879 (number varies)
Attachment: UPSINVOICE_87612.zip
AVs: 3/36 (8.34%) aut, fp, sop


Sorry, we were not able to deliver postal package you sent on October the 19th in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS

X.Password-protected-EXE


Subject: your new employment contract, Lease contract, Contract e-fulfilment, Record in debit of account, Start a personal account, Charge to account, Lending Contract, Contract of order fulfillment
Attachment: contract.zip
AVs: 3/36 (8.34%) fs, kas, sun


Dear Sirs, (greeting varies)
We have already made ready the contract and we also joined some points you’d asked to add to it.
The lawyers change some points on the last page. Read the contract, please, and if there are no objections from your part we can pay for the first batch on Friday.
You can find the contract in the attached ZIP Archive. (Password is: contract)

We also ready to send it by fax if you need
Expecting for your decision

X.W32/Goldun.RW.spy


Subject: Barak Obama sex scandal
Attachment: zeland-01.zip
AVs: 2/36 (5.56%) For, Vir


Body:
Barak Obama p0rn video, file attached, watch him


Thursday, November 6, 2008

X.Troj/Invo-Zip_kei

Subject: Recovery KEYS for your account
Attachment: The_keys.zip
AVs: 7/36 (19.44%) An, Au, F-P, Mc, Se, So, The

Body:
Greating, (Recipient)
To recover your account you need some keys. These keys are in the word file attached to this letter. You should save the keys in a safe place.

Till next time, Lucinda Mendoza

Wednesday, November 5, 2008

X.Troj/Agent-_int_sus


Subject: Your internet access is going to get suspended
Attachment: user-EA49945X-activities.zip
AVs: 9/36 (25.00%) An, eS, Ik, Pa, Se, So, Su, Tr, VB

Body:
Your internet access is going to get suspended
The Internet Service Provider Consorcium was made to protect the rights of software authors, artists.We conduct regular wiretapping on our networks, to monitor criminal acts.
We are aware of your illegal activities on the internet wich were originating fromYou can check the report of your activities in the past 6 month that we have attached.
We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended.

Sincerely
ICS Monitoring Team

X.Troj/Invo-Zip_ke2

Subject: The Activation Keys
Attachment: new_activation_keys.zip
AVs: 3/36 (8.34%) Mc, So, The

Body:

Hello,

As you asked your account was stopped. It is a temporary measure. To activate your account use the keys from the attached word document.
To ask any questions, please, address any our office

X.Troj/Invo-Zip_Ke


Subject: Recovery KEYS for your account
Attachment: The_Keys.zip
AVs: 3/36 (8.34%) Mc, So, The

Body:

Dear Customer, (recipient)
To recover your account you need some keys. These keys are in the word file attached to this letter. You should save the keys in a safe place.

Kind regards, Alden Swift

Tuesday, November 4, 2008

X.Troj/Invo-Zip.fdx


Subject: Your Tracking # 9915872696(varies)
Attachment: INVOICE_8761277.zip
AVs: 1/36 (2.78%) So

Body:

Sorry, we were not able to deliver postal package you sent on October the 19th in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS

Monday, November 3, 2008

X.W32.Worm.Autorun.OD

Subject: The Keys to Recover
Attachment: The_Keys.zip
AVs: 5/36 (13.89%) Bi, GD, Mc, So, The
Body:

Dear Valued Customer, Accounting


There are the keys to recover your personal account. In order to use them later, please, preserve them in a sure place.


Good luck, Mohammad Fletcher

X.Win32/Emold.gen_keys



Subject: the keys of activation

Attachment: active_keys.zip

AVs: 11/36 (30.56%) An, Au, CAT, F-P, Mc, Mi, Se, So, The, Tr, VB

Body:

Hello,

s you requested your account was held up. You can activate it any time with the help of the keys (they are in Word file) added to this letter.

Feel free to address to our offices in your place to get all your questions answered.

Sunday, November 2, 2008

X.W32.HEURISTIC-Key


Subject: Keys of Activation
Attachment: Activation_key.zip
AVs: 7/36 (19.45%) An, Au, F-P, Mc, Se, So, The
Body:
Hello,
Your account was temporarily suspended on demand.
Please, activate your account using the keys which are in the attached Word file.
If you have any questions you can address to one of our offices in your city.