Thursday, December 10, 2009

X.Win32/Bredolab.X


Subject: DHL International. Get your parcel NR.7731
Attachment: DHL_Label_cee35.zip
AVs: 23/41(56.1%) ant, aut, ava, avg, bit, cat, cla, fp, fs, for, gd, ika, mca, mcgw, mic, nod, nor, pct, sop, sym, tre, vir

Dear customer!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly.

Please attention!
The shipping label is attached to this e-mail.
Print this label to get this package at our post office.


Please do not reply to this e-mail, it is an unmonitored mailbox!


Thank you,
DHL Global Forwarding Services.

Thursday, November 5, 2009

X.Win32/Cutwail.genC


Subject: UPS Delivery Problem
Attachment: inv.zip
AVs: 7/40 (17.5%) ant, aut, fp, fs, mcgw, mic, sop

Dear customer!

Unfortunately we were not able to deliver the postal package which was sent on the 20th of June in time
because the addressee's address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Wednesday, November 4, 2009

X.W32/Bredolab_B/Bb


Subject: Facebook Password Reset Confirmation!
Attachments: Facebook_Password_03d09.zip / Facebook_Password_c54e7.zip
AVs: 15/41 (36.59%) aut, bit, cla, com, esa, etr, fp, fs, gd, ika, nod, nor, sop, sun, tre

Hey (recipient) ,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.

Tuesday, November 3, 2009

X.Troj.Crypt.XPACK.Gen5


Subject: hi friend
Attachment: t658657.zip (78 KB)
AVs: Result: 10/41 (24.39%) An, Au, F-P, Ka, Mc, Mi, Nor, So, Sy, VB

Body:

See attached document.

Thursday, October 29, 2009

Win32/Zbot.genR


Subject: Myspace Password Reset Confirmation
Attachment: myspace_94354.zip
AVs: 9/41 (21.95%) bit, gd, kas, mart, mic, nod, sop, sun, sym


Hello,

Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document.

Thanks,
The Myspace Team

Tuesday, October 27, 2009

X.Win32/Spy.Zbot.VM1

Subject: UPS Invoice 5305325782943
Attachment: RESU8723.zip (77 KB)
Avs: 6/41 (14.64%) Bi, Gd, NO, So, Su, Sy
Body:
Unfortunately we were not able to deliver postal package you send on October the 1st in time because the recipients address is not correct.
Please print out the invoice cioy attached and collect the package at our office
Your UPS

Friday, October 23, 2009

X.W32.Kryptik.102309


Subject: Contract of Settlements
Attachment: contract_1.zip (31)kb
AVs: Result: 1/41 (2.44) Ka

Body:

Greetings,
We have prepared a contract and added the paragraphs that you wanted to see in it.Our lawyers made alterations on the last page. If you agree all the provisions we are ready to make the payment on Friday for the first consignment,
We are enclosing the file with prepared contract. Password: 345543

If necessary, we can send it by fax.
Looking forward to your dicision

Tuesday, October 20, 2009

X.W32.Fed.warn


Subject: Fedex Tracking N5421062126 (random string)
Attachment: TR768212.zip
AVs: 7/41 (17.01%) aut, cat, cla, es, fp, mic, vba

Unfortunately we were not able to deliver postal package you sent on October the 18st in time because the recipient's address is not correct.
Please print out the invoice copy attached and collect the package at our office

Your UPS

Monday, October 19, 2009

X.Win32/Kryptik.AVJb


Subject: Conflicker.B Infection Alert
Attachment: install.zip
AVs: 24/41 (58.54%) ant, aut, ava, bit, cat, cla, drw, es, fp, for, gd, ika, kas, mca, mcgw, mic, nod, pan, pre, sop, sym, tre, vir

Dear Microsoft Customer,

Starting 18/10/2009 the ‘Conficker’ worm began infecting Microsoft customers unusually rapidly. Microsoft has been advised by your Internet provider that your network is infected.

To counteract further spread we advise removing the infection using an antispyware program. We are supplying all effected Windows Users with a free system scan in order to clean any files infected by the virus.

Please install attached file to start the scan. The process takes under a minute and will prevent your files from being compromised. We appreciate your prompt cooperation.

Regards,
Microsoft Windows Agent #2 (Hollis)
Microsoft Windows Computer Safety Division

Thursday, October 15, 2009

X.W32.kryptik.bredo


Subject: DHL customer service. Get your parcel Nr.49053
Attachment: DHL_print_label_ef99e.zip
AVs: 11/41(26.83%) ant, aut, bit, cat, fp, gd, ika, mcgw, nod, nor, sop

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please note!
The shipping label is attached to this e-mail.
Print this label to get this package at our post office.


Thank you for attention.
DHL Global Forwarding Services.

X.INSt.troj


Subject:
Microsoft Outlook Notification for the (recipient address@recipient domain)
Attachment: install.zip
AVs: 7/41 (17.01%) aut, cat, cla, es, fp, mic, vba

You have (6) New Message from Outlook Microsoft

- Please re-configure your Microsoft Outlook Again.
- Download attached setup file and install.

Wednesday, October 14, 2009

X.Troj_BredoZp-H1

Subject: DHL service. You should get the parcel! Delivery NR.0723
Attachment: DHL_Package_3cb5a.zip (53 KB)
AVs: 5/40 (12.5%) An, Au, No, So

Body:

Hello!

The courier company was not able to deliver your parcel by your address.Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!Please note!The shipping label is attached to this e-mail. Please print this label to get this package at our post office.

Thank you for attention.
DHL Express Services.

Friday, October 9, 2009

X.Trojan.Crypt.FKM.Gen

Subject: You've received a postcard
Attachment: ecard.zip(24kb)
AVs: 4/41 (9.76%) An, Cat, Mc, So

Body:

Good day.

Your family member has sent you an ecard from 123greetings.com.

Send free ecards from 123greetings.com with your choice of colors, words and music. Your ecard will be available with us for the next 30 days. If you wish to keep the ecard longer, you may save it on your computer or take a print. To view your ecard, open zip attached file.

Friday, October 2, 2009

Troj/BredoZp-I.dhl_a

Subject: DHL delivery problem number 7981
Attachment: File_DHL_N3caf081.zip (46 KB)
AVs: 1/41 (2.44%)
Body:
Dear customer!
Unfortunately we were not able to deliver your postal package sent on the 13th of July in timebecause the recipient’s address is wrong.Please print out the invoice copy attached and collect the package at our department.
DHL Customer Services.

X.W32/Agent.LGE!tr.intsall

Subject: (Blank)
Attachment: install.zip
AVs: 1/41 (2.44%)

Body:

(Blank)

X.W32/Agent.LGE!tr.open_d

Subject: (Blank)
Attachment: open.zip
AVs: 0/41
Body:
(Blank)

Thursday, October 1, 2009

Friday, September 11, 2009

X.Mal/Bredo-J11b

Subject: Shipping confirmation for order ╧375547.(random #)
Attachment: Dc3bc2aea.zip (25 KB)
AVs: 10/41 (24.39%) Au, Bi. Dr, F-P, Fo, GD, No, So, Su, Tr

Body:
Hello!
Thank you for shopping at our internet store!We have successfully received your payment.
Your order has been shipped to your billing address. You have ordered Apple MacBook Air MB543LL. You can find your tracking number in attached to the e-mail document. Please print the label to get your package.
We hope you enjoy your order!
Notebookreview.com

Thursday, September 10, 2009

X.Mal/Bredo-J10c


Subject: Shipping confirmation for order ╧ 327140489. (random string)
Attachment: D239734d9.zip
AVs: 14/41(34.15%) aut, ava, avg, bit, fp, for, gd, mic, nod, nor, sop, sym, tre, vir


Hi!

Thank you for shopping at our internet store!
We have successfully received your payment.

Your order has been shipped to your billing address. You have ordered Sony VAIO VGC-JS230J (random item). You can find your tracking number in attached to the e-mail document. Please print the label to get your package.


We hope you enjoy your order!
Alastore.ala.org

X.Mal/Bredo-J10b


Subject: DHL Tracking Number 8252.
Attachment: D65633346.zip
AVs: 14/41(34.15%) aut, ava, avg, bit, fp, for, gd, mic, nor, sop, sun, sym, tre, vir

Dear customer! Unfortunately we were not able to deliver the package which was sent on the 8th of July in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

DHL Delivery Services.

X.Mal/Bredo-J10a

Subject: UPS Delivery problem NR LA75NYZIDO.
Attachment: D1f0d86bf.zip (26 KB)
AVs: 14/41 (34.15%) Au, AV, AVG, Bi, F-P, Fo, GD, No, Mi, NOD, So, Sy, Tr, Vi
Body:
Dear customer! Unfortunately we were not able to deliver your postal package you have sent on the 4th of June in timebecause the recipient’s address is erroneous.Please print out the invoice copy attached and collect the package at our office.
United Parcel Service.

Wednesday, September 9, 2009

X.Mal/Bredo-A5


Subject: UPS Delivery problem NR 0MUOFY0ULE
Attachment: M987cda46.zip (29 KB)
AVs: 17/41 (41.47%) Au, Av, AVG, Bi, F-P, Fo, GD, Mc, Mc, Mi, NOD, NO, So, Su, Sy, Tr, Vi
Body:
Dear customer! We were not able to deliver postal package which was sent on the 19th of June in timebecause the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.
United Parcel Service.

Tuesday, September 8, 2009

X.Mal/Bredo-A08c


Subject: UPS Tracking Number TNF083G94 (random string)
Attachment: Me952e72c.zip
AVs: 10/41(24.4%) aut, bit, fp, for, gd, mca, mart, nor, sop, tre

Hello! Unfortunately we were not able to deliver the postal package you have sent on the 26th of June in time
because the addressee's address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America

X.Mal/Bredo-A08a


Subject: DHL Tracking Number 5G2XC98 (random string)
Attachment: Mb6479e13.zip
AVs: 11/41(26.83%) aut, bit, fp, fs, for, gd, mca, mart, nor, sop, sun, tre

Dear customer! We were not able to deliver the package you have sent on the 21st of June in time
because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

DHL Delivery Services.

Wednesday, September 2, 2009

X.Mal/Bredo-A02a

Subject: DHL Tracking Number 8JZ7Z3AL (random string)
Attachment: M0dc15fc6.zip
AVs:

Monday, August 31, 2009

X.mal/Bredolab.ocf

Subject: Shipping confirmation for order ╧47465
Attached: M57142b26.zip (29 KB)
AVs: 9/41 (21.95%) Au, Av, Bi, F-P, GD, Mi, NO, Ri, So
Body:
Hi!
Thank you for shopping at our internet shop!
We have successfully received your payment.
Your order has been shipped to your billing address. You have ordered Apple iPhone 3G. You can find your tracking number in attached to the e-mail document. Please print the label to get your package.
We hope you enjoy your order!
Pcmemorystore.com

X.Mal/Bredo-A31b


Subject: Western Union transfer is available for withdrawl
Attachment: Me84bf135.zip
AVs: 7/41(17.07%) aut, bit, fp, gd, nod, ris, sop

Dear customer.

The amount of money transfer: 0854 USD.
Money is available to withdrawl.

You may find the MTCN and receiver's details in document attached to this email.

Western Union.
Finance Department.




Scanned for Viruses and Spam.

X.W32/Bredol_ric

Subject: Western Union transfer is available for withdrawl
Attachment: Md49b5dd2.zip (29 KB)
AVs: 7/41 (17.07%) Au, Bi, Br, Tr, GD, NO, RI. SO

Body:
Hello.

The amount of money transfer: 7898 USD.
Money is available to withdrawl.

You may find the MTCN number and receiver's details in document attached to this email.

Western Union.
Financial Services.

Thursday, August 27, 2009

X.Bredolab.gen.v

Subject: Shipping confirmation for order ╧ 13637071
Attachment: Db7119a7c.zip (23 KB)
AVs: Result: 12/41 (29.27%)Au, Bi, F-P, GD, Mc, Mc+, Mi, No, Ri, So, Su, Sy

Body:
Hello!

Thank you for shopping at our internet store!We have successfully received your payment.

Your order has been shipped to your billing address. You have ordered Acer Extensa 5230E. You can find your tracking number in attached to the e-mail document. Please print the label to get your package.
We hope you enjoy your order!
Cart.undftd.com

Tuesday, August 18, 2009

X.Win32/Bredolab.s1


Subject: Thank you for settling the order No.21846 (random number)
Attachment: Db027715e.zip
D380b0937.zip
Dda6b1e9b.zip

AVs: 4/34 (11.77%) aut, fp, ris, sop

Dear Customer!

Thank you for placing your order at our e-store.
Your order: Nokia N78 (random product), was dispatched at your address.
The tracking number of your postal parcel is indicated in the document attached to this letter.
Please, print out the postal label for receiving the parcel.

Internet Store. (random fake store)
Sonystyle.com
(random site)

X.Win32/Bredolab.t8


Subject: UPS Tracking Number HUI2129 (random string) Attachment: Dbbaae39a.zip
AVs: 4/41(9.76%) aut, fp, ris, sop



Hello! Unfortunately we were not able to deliver your postal package which was sent on the 2nd of June (random date) in time
because the addressee's address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

Monday, August 17, 2009

X.Win32/Kryptik.ACN.br


Subject: UPS Tracking Number 2V7354W
Attachment: UPSNR_289dffca.zip (32 KB)
AVs: Result: 10/41 (24.39%) Au, AV, eT, F-P, Mi, NOD, Ri, So, Sy

Body:
Hello! Unfortunately we were not able to deliver the package which was sent on the 8th of June in timebecause the addressee's address is inexact.
Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service of America

X.Win32.Bredolab.ft


Subject: UPS Tracking Number OF21MZI (random string)
Attachment: UPSNR_45c9df57.zip
AVs: 27/41(65.86%) as, ahn, antV, antA, aut, ava, avg, cat, cla, drw, es, et, fp, fs, for, gd, ika, kas, mart, mcgw, mic, nod, pan, ris, sop, sym, vba

Hello! We failed to deliver the postal package sent on the 7th of July (random date)in time
because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service of America

X.Win32.Bredolab.lx


Subject: DHL Delivery problem NR 5W08E38
Attachment: Dc6308a96.zip
AVs: 8/41 (19.52%)aut, avg, bit, fp, mic, nod, ris, sop

Dear customer! We were not able to deliver the postal package which was sent on the 13th of July in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

Your DHL Delivery Services.

Friday, August 7, 2009

X.Mal/BredoPk-Bg


Subject: UPS Tracking Number DCMJJ60
Attachment: UPSNR_b2003635.zip
AVs: 9/41 (21.96%) ant, aut, fp, mcgw, mic, nod, ris, sop, sym


Dear customer! We failed to deliver your postal package you have sent on the 1st of July in time
because the addressee's address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.Mal/BredoPk-Bf


Subject: UPS Tracking Number 16RRZKS
Attachment: UPSNR_055f9cbe.zip
AVs: 9/40 (22.5%) ant, aut, fp, mcgw, mic, nod, ris, sop, sym


Hello! Unfortunately we were not able to deliver the package which was sent on the 13th of June in time
because the addressee's address is not correct.
Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service of America

Thursday, August 6, 2009

X.Mal/BredoPk-B


Subject: UPS Tracking Number FFST106 (random string)
Attachment: UPSNR_74d0d1d6.zip
AVs: 10/40 (25%) as, ant, aut, fp, ika, mart, mcgw, mic, ris, sop,


Hello! Unfortunately we were not able to deliver the package which was sent on the 2nd of June in time
because the addressee's address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.Mal/BredoPk-C


Subject: UPS Tracking Number WRPTD9L (random string)
Attachment: UPSNR_4da6517c.zip
AVs: 12/41 (29.27%) as, ant, aut, fp, ika, mart, mcgw, mic, pan, ris, sop, sym


Dear Customer! Unfortunately we were not able to deliver the package you have sent on the 13th of June in time
because the addressee's address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.Mal/Bredo-A


Subject: UPS Tracking Number 0L7P481 (random string)
Attachment: UPSNR_32be958a.zip
AVs: 6/41 (14.63%) ant, mart, mcgw, mic, ris, sop


Hello! We failed to deliver the package sent on the 1st of July in time
because the addressee's address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.Mal/BredoPk-Bx


Subject:UPS Tracking Number H3HKZ1F
Attachment: UPSNR_981f6ef7.zip
AVs: 5/41 (12.20%) An, Mc, Mi, Ri, So

Body:

Hello!
Unfortunately we failed to deliver the postal package you have sent on the 8th of June in timebecause the recipient’s address is incorrect.Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

Wednesday, August 5, 2009

X.Troj/BredoZp-B


Subject: UPS Tracking Number 3XIUSQI (random string)
Attachment: UPSNR_7a04d392.zip
AVs: 5/41 (12.20%) ant, mcgw, mic, ris, sop

Dear customer! Unfortunately we failed to deliver your postal package which was sent on the 25th of July in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service of America

Friday, July 24, 2009

X.Trojan.Dropper.Gnup.e


Subject: (blank)
Attachment: UPSNR_881762166.zip
AVs: 0/41 (0%)
Body:
(blank)

X.Trojan.Dropper.Gnup.d


Subject: (blank)
Attachment: UPSNR_881762103.zip
AVs: 0/41 (0%)
Body:
(blank)

Thursday, July 23, 2009

X.Trojan.Dropper.Gnup.c


Subject: (blank)
Attachment: UPSFILE_NR10128766.zip
AVs: 0/41 (0%)
Body:
(blank)

X.Trojan.Dropper.Gnup.b


Subject: (blank)
Attachment: UPSFILE_NR10128755.zip
AVs: 0/41 (0%)
Body:
(blank)

X.Trojan.Dropper.Gnup


Subject: (blank)
Attachment: UPSFILE_NR10108723.zip
AVs: 0/41 (0%)
Body:
(blank)

Thursday, July 16, 2009

X.Crypt.XPACK


Subject: Undelivered Mail Returned to Sender / Fwd: Llamame.
Attachment: DC0049.zip
AVs: 9/32 (28.13%) ant, aut, cla, fp, mca, mart, mcgw, sop, tre


This is the mail system at host (mail server)

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system
(routing info 550 message)


(Original message)

Hello, (original recipient)

July, Wednesday 16, 2009, 10:43:60 AM, you wrote:


> Hola.
> Te quiero con todo mi corazon y el alma. Te extrano tanto.
> Envio mi foto. Por favor, no lo muestras a su familia y amigos.
> Muchos besos, tu amor.

Hola! Super bonita foto :) Llamame: 34 559828676


--
Best regards,
deluna

Monday, June 22, 2009

X.Trojan-Spy.Win32.Agent


Subject: Worldpay CARD transaction Confirmation
Attachment: Worldpay_NR9772.zip
AVs: 4/41 (9.76%) ik, mca, mart, pan

Thank you!

Your transaction has been processed by WorldPay, on behalf of Amazon Inc.

The invoice file is attached to this message.
This is not a tax receipt.
We processed your payment.
Amazon Inc has received your order,
and will inform you about delivery.
Sincerely, Amazon Team

This confirmation only indicates that your transaction has been processed successfully. It does not indicate that your order has been accepted. It is the responsibility of Amazon Inc to confirm that your order has been accepted, and to deliver any goods or services you have ordered.

Tuesday, June 16, 2009

X.Trojan.Dropper.Genup


Subject: UPS Delivery problem
File: UPSFILE_NR67721912.zip (29 KB)
AVs: 6/40 (15.00%) An, CA, Dr, Mc, Mc+A, Mi

Body:
Hello! We were not able to deliver the postal package sent on the 5th of April in timebecause the recipient’s address is incorrect.Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service of America

Thursday, June 4, 2009

X.W32.troj.ob.OH.b


Subject: Delivery problem
Attachment: FILE_NR98671201.zip
AVs: 2/40 (5%) cat, mic


Dear customer!

Unfortunately we failed to to deliver the postal package you have sent on the 8th of March (random date) in time
because the addressee's address is wrong.
Please print out the invoice copy attached and collect the package at our department.

Your United Parcel Service

X.W32/troj.OB.FH


Subject: Delivery problem
Attachment: FILE_NR98671201.zip
AVs: 2/40 (5%) cat, mic


Hello!

We failed to to deliver the postal package sent on the 18th of May (random date)in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

Your UPS

Monday, June 1, 2009

X.Trojan.Spy.ZBot.JFG


Subject: Postal Tracking #9W1Q3659177RD7D (random string)
Attachment: UPS_FAX_976100211.zip
AVs: 8/40(20%) ant, bit, cat, gd, mcgw, mic, sop, sym

Hello!

We were not able to deliver postal package you sent on the 14th of March (random date)in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America