Monday, December 20, 2010

X.W32.dhl.12.20


Subject: ">DHL International Services
Attachment: SNPcopy_122010.zip

Body:


Dear Sir/Madam,

Your package has been returned to the DHL office. The reason of the return is - Error in the delivery address

Attached to the letter mailing label contains the details of the package delivery. You have to print mailing label, and come in the office in order to receive the packages.

Thank you for attention.

DHL


Wednesday, December 8, 2010

X.Paypal.actx.a

Subject: Your Account Has Been Limited !
Attachment: PayPal.com_Account_Confirmation_Form.pdf.zip
AVs: 0/43 0%

Wednesday, December 1, 2010

X.W32.Zbot12.1.pak


Subject: DHL Delivery Services, DHL Parcel Message, DHL Notification Message
Attachment: 238000.zip, 681229.zip, 56037.zip, 981677.zip ...
Body:


Dear Customer!

We were not able to deliver your package to your address!
Please pick up your package in local DHL office.

Attention!
The post label is attached to this e-mail.
We kindly ask you to print it and take it to the post office to pick up the package.
Thank you!


DHL EXPRESS - good for business

Thursday, October 28, 2010

X.W32.Zbot.deu


Subject: Ich weiß nicht, wie ich es sagen, aber ich habe vor langer
Attachment: Bild.zip

Body:

Hallo Man,

Ich weiЯ nicht, wie ich es sagen, aber ich habe vor langer Zeit zu euch senden einige Fotos tryed, aber ich habe gedacht, dass Sie nicht interessiert sind, mich zu sehen.
Aber jetzt werde ich Ihnen die Fotos in der Anlage.
Laden Sie die Bilder und extrahieren sie, ich bin sicher, dass Sie sie mцgen. Das Passwort ist: 123456

Machen Sie einen schцnen Tag.

Tuesday, October 26, 2010

X.W32.kryptik.hpqb

Subject: UPS Invoice copy N47204
Attachment: UPS_document_ID38967.zip
AVs: (18.2% detection rate)

Body:
(see image)

Wednesday, October 20, 2010

X.W32.Oficla-A1020


Subject: Your package is available for pickup.ID25391 (random number)
Attachment: UPS_Label_NR7753.zip

Body:

Hello

Your parcel has arrived at the post office on October 18.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.
UPS Global Services.

Thursday, October 14, 2010

X.W32/Bredolab.2a

Subject: UPS Online Service. Error delivery address number 7114
Attachment: dode.jpg
AVs:10 /43 (23.3%) Au, Cat, Cl, eS, F-P, Jia, K7, PcT, So, TheH

Body:

Dear client
Your parcel has arrived at the post office on October 12. Our Driver was unable to deliver the parcel to your address.To receive a parcel you must go to the nearest UPS office and show your mailing label.Mailing label is attached to this letter.

You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.

UPS Global Services.

Monday, October 4, 2010

X.Win32/Oficla.T1

Subject:USPS Delivery Problem NR5170282
Attachmant: USPSLabel.zip
AV's: 2/ 43 (4.7%)

Body:
*Uses image as shown above

Tuesday, September 28, 2010

X.W32.Kryptik.928


Subject: Approved meeting minues
Attachment: Approved.zip

body:

Good Morning Everyone,
Here are the approved September 28, 2010 meeting minutes.

Friday, September 24, 2010

X.Win32.Oficla-AB.uld

Subject: USPS Delivery Problem NR368058
Attachment: USPSLabelDoc.zip (23 KB)
AVs: Result: 5/ 42 (11.9%) CL, GD, NOD, PA, PR

Message Body (uses a .jpg instead of text)



Wednesday, September 15, 2010

X.Html.JS.915


Subject: Labels and such
Attachment: label.html

Body:

Labels and such Hey complet

Payment has been made and attached are the labels.
Thanks a ton man, very cool!
Can't wait to get em.

Laura

----------------------------------------------------------------------

Your payment for $375.00 USD to complet@talb.com has been sent.

It may take a few moments for this transaction to appear in the Recent Activity list on your Account Overview.



Payment details
Amount: $375.00 USD
Transaction Date: Sep 15, 2010
Transaction ID: 8U7617815K399153U

Subject: You've got money!

Wednesday, September 1, 2010

X.Win32/Oficla.IE

Subject: DHL Services. Get your parcel number 3948
Attachment: di cosol.jpg (23 KB)
AVs: 15/ 43 (34.9%)
Body:
Dear customer.
We were not able to deliver your package to your address.
Reason: Error in delivery address.
Attention!
Get your parcel in your local post office.The postal label is attached to this e-mail.We kindly ask you to print it and take it to the post office to pick up the package.
Thank you!
DHL International GmbH.

Monday, August 23, 2010

X.Mal/FakeAV-BW.1.1


Subject: Fedex Invoice copy N9956225 (random number)
Attachment: FEDEXInvoiceEE744573OP.zip

Body:
[image]

Thursday, August 19, 2010

X.JS.Redirect.CV


Subject: Resume
Attachment: CV.html

Body:

please find attached my cv

X.W32.Kryptik.GDT


Subject: Rejected ACH transaction, please review the transaction report
Attachment: ACH_0889388_REP.zip

body:

Dear bank account holder,

The ACH transaction, recently initiated from your bank account (by you or any other person), was rejected by the Electronic Payments Association. Please Find Attached Transaction Report

------------------------------------------------------------------

Electronic Payments Association Manager

Tuesday, August 17, 2010

X.W32.zbot.FH


Subject: Good Music
Attachment: Second chord sounds in world's longest lasting concert - Yahoo! News.zip

Body:

It has a beat, you can dance to it – I’d give it an eight.




************************************************************************
This e-mail and any of its attachments may contain Exelon Corporation
proprietary information, which is privileged, confidential, or subject
to copyright belonging to the Exelon Corporation family of Companies.
This e-mail is intended solely for the use of the individual or entity
to which it is addressed. If you are not the intended recipient of this
e-mail, you are hereby notified that any dissemination, distribution,
copying, or action taken in relation to the contents of and attachments
to this e-mail is strictly prohibited and may be unlawful. If you have
received this e-mail in error, please notify the sender immediately and
permanently delete the original and any copy of this e-mail and any
printout. Thank You.
************************************************************************

X.Zbotb.0817ndg


Subject: Tracking # and Invoice
Attachment: attach.zip

Body:

CIRCUIT SPECIALISTS, INC. TRACK Date-Tue, 17 Aug 2010 22:19:02 +0900 Ref# TRACK
Time-15:35:42 Page 1
Ship Date Tue, 17 Aug 2010 22:19:02 +0900 THRU Tue, 17 Aug 2010 22:19:02 +0900

The attached file is a copy of your invoice. It is best viewed with
notepad or some other text viewer that does not try to format the text.

Date Shipped Our Ref. Your Ref. Tracking #
Tue, 17 Aug 2010 22:19:02 +0900 255596 NET 52777 1Z8771870342348672

Thursday, August 12, 2010

X.Win32/Zbot.gen_Rb


Subject: Your reservation is confirmed - Ref (random number)
Attachment: Allhotels.zip
AVs:4/42 (9.5%) Bi, Ka, F-S, Mi

Body:

Hello,
Thank you for making a booking through Allhotels
This voucher confirms that you have paid $ 1,100.00 as a deposit for the cost of the rooms and services detailed below. The guest must present this voucher, along with photo identification matching the guest name on this voucher, to the hotel on check-in.
The hotel will also ask for a valid credit card on check-in. This is to cover incidental expenses like meals, drinks, laundry, etc. Guests are responsible for payment of all extra charges direct to the hotel.
Please find the details in the attachment.

X.Win32/Zbot.gen_Ra


Subject Beauty and the Geek 2
Attachment: flyers.zip
AVs: 4/42 (9.5%) Bi, Ka, F-S, Mi


Body:

Hey guys

Already mentioned this to some of you and sorry about the mass email but thought I could be missing out on a good opportunity if I didn’t…

So… I’m looking for geeks all over USA. They need to be highly intelligent and shy/nervous around girls etc

All the contestants genuinely had an amazing time last year and are actively recommending it to their mates this year. They get the chance to teach hot girls a thing or two, and get the chance to win $100,000! So far – I haven’t spoken to a single geek who’s been offended that I’ve called them one. But if you’d rather – please do pass on their details to me and I’ll get in touch with them anonymously.

I’ve attached flyers in case you want to forward on, or put up in your office… Thanks so much

Friday, August 6, 2010

X.W32.Bredolab.AN

Subject: Scan from a Xerox WorkCentre Pro N 8022714
Attachment: Xerox WorkCentreReader.zip (11 KB)
Body:
Please open the attached document. It was scanned and sent to you using a Xerox WorkCentre Pro.

Sent by: Guest
Number of Images: 1
Attachment File Type: ZIP [DOC]

WorkCentre Pro Location: machine location not set
Device Name: XRX0637AA7ACDB49891363

Wednesday, July 21, 2010

X.W32.Tibs.IT.pak


Subject: FROM (Random Name)
Attachment: document.zip
AVs: 12/41 (29.27%) AU, Bi, Dr, F-P, F-S, GD, Mc, NOD, nP, Pa, Pr, So
Body:

PLEASE,

KINDLY READ THE ATTACHED DOCUMENT AND GET BACK TO ME.

Lucio Mullins

Tuesday, June 15, 2010

X.W32.Bredolab.FA


Subject: Look my CV. Thank you! MyID NR3246057
Attachment: resume893.zip
AVs: 1/41 (2%) avg

Good afternoon!

I have figured out that you have an available job.
I am quiet intrested in it. So I send you my resume,

Looking forward to your reply.
Thank you.

Tuesday, June 8, 2010

X.W32/VBcrypt.E.gen

Subject:Changelog 07.06.2010
Attachment: Changelog_07_06_2010.zip (34 KB)
AVs: 8/41 (19.51%) An, Au, eS, F-P, Ka, No, So, The

Body:

Dear Customers,
as promised,
Francine

* Name in the [From] field always matches the name in the body of the message

Wednesday, June 2, 2010

X.TROJ.Variant.Kates.2


Subject: Please attention!
Attachment: open.exe (42 KB)
AV's: 12/41 (29.27%) AU, Bi, Dr, F-P, F-S, GD, Mc, NOD, nP, Pa, Pr, So

Body:

Dear customer!
The courier company was not able to deliver your parcel by your address.Cause: Error in shipping address.
You may pickup the parcel at our post office personaly.
Please attention!
The shipping label is attached to this e-mail.Print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox!
Thank you,
DHL Delivery Services.

X.W32.Kryptik.Oulook.zip


Subject: Outlook Setup Notification
Attachment: outlookupdate.zip, outlookupdate.exe.doc
AVS: 10/41 (24.39%) as, ant, avg, etr, ika, nod, nor, pan, sop, sun

You have (8) messages from Microsoft Outlook.

Please re-configure your Microsoft Outlook again.

Download attached setup file and install.

Wednesday, April 28, 2010

X.Mal/Koobface-E.Up


Subject: Your Package N9982883(Random)
Attachment: PackageN___388922_38.zip (30 KB)
AVs: 6/39 (15.38%) An, Au, F-prot. Mc, So, The

Body:

Good day,
Unfortunately, we could not deliver postal package sent 01 April, As the recipient’s address does not exist. Please, print out the bill of lading that is in the attached document, and collect your parcel in our office at the address indicated in the bill of lading.

Best regards,
Benita Haywood

Wednesday, April 14, 2010

X.Kryptik.DQK


Subject: This love note is very happy thought, and it is so true., Your love has made me... wealthy beyond my dreams., If I don't romance you, If I don't adore you, If I don't cherish you... I don't deserve you., What I long for... is forever with you., I love... to hold you in my arms.
Attachment: for_you_my_love.zip
AVs: 4/40 (10%) kas, mic, nod, sun

When I am with you, ... I never want to leave.


Wednesday, February 10, 2010

X.W32/FakeAV.AM_b.


Subject: updated account agreement
Attachment: agreement.zip
AVs: 10/41 (24.4%) avg, cat, et, ika, mic, pre, sun, sym, tre


Dear Facebook user,

Due to Facebook policy changes, all Facebook users must submit a new, updated account agreement, regardless of their original account start date.
Accounts that do not submit the updated account agreement by the deadline will have restricted.

Please unzip the attached file and run “agreement.exe” by double-clicking it.

Thanks,
The Facebook Team

Wednesday, February 3, 2010

X.Bredolab.Gen.2a

Subject: Congratulation !!!
Attachment: winner.zip (9543 b)
Avs: 6/40 (15.00%) Cat, No, So, Su, Tr, Vi
Body of message:
Congratulations!! You have won todays Macbook Air.
Please open attached file and see details.

Friday, January 29, 2010

X.Troj/In-Zip.dl


Subject: DHL delivery problem NR 21010.
Attachment: DHL_label_NR29801.zip
AVs: Result: 4/41 (9.76%)

Body:
Dear customer!
The courier service was not able to deliver your parcel at your address.
Cause: Mistake in address
You may pickup the parcel at our post office personally.
The delivery advice is attached to this e-mail.Print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox!
Thank you.DHL Delivery Services.

Thursday, January 28, 2010

X.FakeAlert012810


Subject: UPS Delivery Problem NR 07623(random number)
Attachment: UPS_invoice_NR59172.zip
AVs: 2/41 (4.88%) avg, sop


Dear customer!

We failed to deliver your postal package sent on the 9th of January in time
because the addressee's address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Tuesday, January 19, 2010

X.W32/FakeAlert


Subject: UPS Tracking Number 78381288(random number)
Attachment: UPS_invoice _Nr97534.zip
AVs: 3/41 (7.32%) avg, cat, sop

Dear customer!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly.

Please attention!
The shipping label is attached to this e-mail.
Print this label to get this package at our post office.


Please do not reply to this e-mail, it is an unmonitored mailbox!



Thank you,
United Parcel Service.

X.Troj/In-Zip.a

Subject: UPS Tracking Number 62911790.
Attachment: UPS_invoice _Nr97534.zip (44 KB)
AVs: 3/41 (7.32%) AVG, Cat, So

Body:

Hello!

The courier company was not able to deliver your parcel by your address.Cause: Error in shipping address.

You may pickup the parcel at our post office personaly.Please attention!The shipping label is attached to this e-mail. Print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox!

Thank you,
United Parcel Service.

Wednesday, January 13, 2010

X.Troj.Win32.Bredolab.drr

Subject: UPS Tracking Number 1710714(randomized)
Attachment: UPS_invoice_NR67974.zip (28 KB)
AVs: 7/41 (17.07%) An, Au, Ca, F-P, Mc, So, Su


Body:

Hello!

The courier company was not able to deliver your parcel by your address.Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!The shipping label is attached to this e-mail. Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.