Attached is email-doc.zip, which includes the malicious .pif forementioned. Obviously if you get an email like this, delete it immediately.
Subject: Important Notification
Date: 25 July 2005 10:40:43 PM
Delivery-Date: Mon, 25 Jul 2005 22:41:20 +1000
Received: from ato7022 by remus.instanthosting.com.au with local-bsmtp (Exim 4.44) id 1Dx2Gk-0002jA-JB for email@example.com; Mon, 25 Jul 2005 22:41:20 +1000
Received: from [18.104.22.168] (helo=atomicscript.com) by remus.instanthosting.com.au with esmtp (Exim 4.44) id 1Dx2GH-0002dV-4g for firstname.lastname@example.org; Mon, 25 Jul 2005 22:41:18 +1000
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0006_3A27F8D6.ADA0B3D5"
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on remus.instanthosting.com.au
X-Spam-Status: No, score=3.2 required=5.0 tests=FORGED_RCVD_HELO, MISSING_MIMEOLE,NO_REAL_NAME,PRIORITY_NO_NAME,RCVD_IN_NJABL_DUL, RCVD_IN_SORBS_DUL autolearn=no version=3.0.4
We regret to inform you that your account has been suspended due to the violation of our site policy, more info is attached.