X.W32/Rbot.uua

Subject: business contacts
Attachment: contacs.zip
AVs: 12/36 (33.33%) ant, aut, avg, bit, cat, fp, fs, gd, ik, kas, sec

(recipient name)

We managed to export the list of business contacts you have asked for.
The name , address , phone# , e-mail address and website are included.
The list is attached to this message.

After you you check it , could you please let me know if it is complete so we can close the support ticket opened on this matter.

Thank you for using LinkedIn

David Burrows
Technical Support Department

X.W32/Trojan.Spy.XYB

Subject: Could i see you in my office?, Apartment Contract, Updated Contract, Your Contract, Your Apartment Contract, Service of Apartaments, Fixed Your Contract, What Your Opinion, Contract
Attachment: contract.zip
AVs: 4/36 (11.12%) bit, gd, mca, the


Greating (random greeting with recipient name)

We've fixed your apartment contract as you had requested;
clause 15 has been rewritten. Please read the enclosed updated
contract and let us know of your decision as soon as you can.

See you later (random closing)

X.W32/troj.sriz/10.1

Subject: Important document for 49 (number varies)
Attachment: doc.zip
AVs: 4/36 (11.11%) esa, fs, kas

Hello 49 (number matches subject), the document is attached. Pass 123.

X.W32/troj.push.leg

Subject: New Clauses, The penalties have been toughened , The New Law, Some Illegal Operations, New Law, New Document
Attachment: Legislation.zip
AVs: 2/36 (5.56%) mca, the

Hallo (greeting varies)

New clauses have been added to the legislation regulating your online activities; some of the operations are now considered illegal. The new law has come into force as of 25.09.2008; the penalties have been toughened.

Please read the new document and be more accurate further on.

Remember me to your wife (closing varies)

X.W32/troj.PW9/29

Subject: (name varies with recipient) Bill for angier. Please pay within this week.
Attachment: bill.zip
AVs: 4/36 (11.11%) es, fs, kas



Hello angier, the bill is attached. Password is 123.

X.W32/troj.9-29-fee

Subject: Statement of fees 2008/09
Attachment: Fees_2008_2009_N389.zip
AVs: 1/36 (2.78%) the




Please find attached a statement of fees as requested, this will be
posted today.

The accommodation is dealt with by another section and I have passed
your request on to them today.

Kind regards.

Emily (varies with spoofed sender)

X.W32/troj.law

Subject: The penalties have been toughened, New Law, Legislation
Attachment: New_Law.zip
AVs: 6/36 (16.67%) ant, aut, fp, mca, sec, the


Greating (greeting varies)

New clauses have been added to the legislation regulating your online activities; some of the operations are now considered illegal. The new law has come into force as of 25.09.2008; the penalties have been toughened.

Please read the new document and be more accurate further on.

Give my regards to your sister (closing varies)