X.Win32/Zbot.J

Subject: Postal Tracking #G2QN160097H77FW (random string)
Attachment: UPS_SERV867612.zip
AVs: 4/40(10%) cat, es, mic, sop


Hello!

We were not able to deliver postal package you sent on the 14th of March in time
because the recipient’s address is not correct.
.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.BckDR.dhl.hter

subject: DHL Tracking number #PXBRZ888573HV1R (random string)
attachment: dhl_n756512.zip
AVs: 2/40(5.00%) cat, tre

Hello!

We were not able to deliver postal package you sent on the 14th of March in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your personal manager: Antone Myers,
Customer Service: 1-800-CALL-DHL
Fax: 888-221-6211
DHL International, Ltd. All Rights Reserved.

X.Troj.BckDR.DHLver

Subject: DHL Tracking number #3P5G269558E83O
Attachment: DHL_HELP.zip
AV's: 3/40 (7.50%) CAT, eS, Mi

Body:

Hello!
We were not able to deliver postal package you sent on the 14th of March in time
because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.

Your personal manager: Isiah Higgins,
Customer Service: 1-800-CALL-DHL
Fax: 888-221-6211
DHL International, Ltd. All Rights Reserved.

X. Troj/Bckdr-QSL

Subject: DHL Tracking number #KVGI103868NDP44 (random string)
Attachment: DHL_DOC.zip
AVs: 17/39 (43.59%) as, ahn, ant, aut, avg, dr, es, fp, fs, ika, kas, mart, mcgw, mic, sop, sym, tre


Hello!

We were not able to deliver postal package you sent on the 14th of March in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your personal manager: Gena Couch, (random name, matches sender)
Customer Service: 1-800-CALL-DHL
Fax: 888-221-6211
DHL International, Ltd. All Rights Reserved.

X.Trojan.Dropper.Delphi.Gen

Subject: Postal Tracking #PS14864130UVRQI (random string)
Attachment: UPS_Invoice_86512.zip
AVs: 9/39 (23.08%) ant, es, kas, mca, mart, mcgw, mic, sop, tre

Hello!

We were not able to deliver postal package you sent on the 14th of March in time
because the recipient’s address is not correct.
.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

X.Trojan.Spy.Delf.eT

Subject: Confirmation of ticket purchase ZA8OVQH2W26A
Attachment: Delta_eTicket.zip
AV: 19/39 (48.72%) a-s, An, Au, Bi, Dr, eS, F-P, F-S, GD, Ik, Ka, Ka, Mc, Mi, Pa, So, Sy, Tr

Body:

Thanks for the purchase!
Booking number: 60K80N
You will find attached to this letter PASSENGER ITINERARY RECEIPT of your electronic ticket.
It verifies that you paid the ticket in full and confirms your right for air travel and luggage transportation by the indicated flight Delta Air Lines.
On board you will be offered:
- beverages;
- food;
- daily press.
You are guaranteed top-quality services and attention on the part of our benevolent personnel.
We recommend you to print PASSENGER ITINERARY RECEIPT and take it alone to the airport. It will help you to pass control and registration procedures faster.

See you on board!
Best regards,
Delta Air Lines

X.Win32/DelfInject.gen

Subject: UPS Tracking #OG03B03576KW7II (random)
Attachment: UPS_ID.zip
AVs: 5/39 (12.82%) es, fs, mic, nor, tre

Hello!

We were not able to deliver postal package you sent on February the 23th in time
because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.

Your United Postal Service

X.el.Troj/Invo-Zip

Subject: Re[2]: nueva lista de precios (new).
Attachment: Documento.zip
AVs: 3/39 (7.7%) mca, mart, sop


Hello, {#TO_NAME}.

March, Monday 9, 2009, 1:52:48 AM, you wrote:

> Buenas tardes
> Por favor envie recomendaciones para optimizar el negocio en la cara de la crisis.
> Adjunte el plano que se negocio.

Hola.
Estamos preparados, vease el documento adjunto.
Efectue el pago segun la conformidad con nuestro acuerdo.

--
Best regards,
clever (forged sender address)

X.Win32.Inject.gen

Subject: Confirmation of ticket purchase at www.delta.com
Attachment: delta_865123.zip
AVs: 7/39(17.95%) a-s, es, ik, mic, tre, vba, vir


body:

Thanks for the purchase!

Booking number: RU3MC0 (random string)

You will find attached to this letter PASSENGER ITINERARY RECEIPT of your electronic ticket.
It verifies that you paid the ticket in full and confirms your right for air travel and luggage transportation by the indicated flight Delta Air Lines.

On board you will be offered:
- beverages;
- food;
- daily press.
You are guaranteed top-quality services and attention on the part of our benevolent personnel.

We recommend you to print PASSENGER ITINERARY RECEIPT and take it alone to the airport. It will help you to pass control and registration procedures faster.

See you on board!
Best regards,

Delta Air Lines

X.Mal/EncPk-FS

Subject: Re: Check our friends., Re[2] Look at this. , Re: Look at this.
Attachment: DC_0035.zip
AVs: 8/39(20.51%) avg, cat, es, kas, mca, mart, sop, tre


Check that your girlfriend sent me:
===

Hello, (recipient).

March, Wednesday 4, 2009, 7:33:40 AM, you wrote:


> Hi
> I love you with all my heart and soul
> I miss you so much
> I send you my photo
> Please do not show it to your family and friends
> Many Many kissesssss
> Your Love.

HI.
Super nice crazy foto... :)

Call me: 020 77927858

--
Best regards,
benviron (forged sender email)

X.W32/Malware.FWZJ.delt

Subject: Confirmation of ticket purchase at www.delta.com
Attachment: delta_exel_78655.zip
AVs: 6/39 (15.38%) a-s, eS, Ik, No, Tr, Vir

Message Body:

Thanks for the purchase!
Booking number: Q7CROGZYBSPI

You will find attached to this letter PASSENGER ITINERARY RECEIPT of your electronic ticket.It verifies that you paid the ticket in full and confirms your right for air travel and luggage transportation by the indicated flight Delta Air Lines.

On board you will be offered:
- beverages;
- food;
- daily press.
You are guaranteed top-quality services and attention on the part of our benevolent personnel.

We recommend you to print PASSENGER ITINERARY RECEIPT and take it alone to the airport. It will help you to pass control and registration procedures faster.

See you on board!
Best regards,

Delta Air Lines