[nsp-sec] Two variations on the mail settings stuff - one on a Google Docs site

[Bill Owens]

On Thu, May 13, 2010 at 10:09:52AM -0700, Peter Moody wrote:
> ugh. I mean, ack.

Thanks! And as your reward for quick work, here's another one ;)


>Return-path: <syllablefb783 at renman.com>
>Received: from 216-140-246-201.adsl.terra.cl
> (216-140-246-201.adsl.terra.cl [201.246.140.216])
> by adelie.nysernet.org (Postfix) with ESMTP id 81C45590050	for
> <bill-tapr at owensfamily.org>; Thu, 13 May 2010 13:33:22 -0400 (EDT)
>Date: Thu, 13 May 2010 14:33:17 -0300
>From: "iTunes Store" <customer.service at itunes.com>
>Subject: Thank you for buying iTunes Gift Certificate!
>To: <bill-tapr at owensfamily.org>
>Message-id: <000d01caf2c2$5f5c1d50$6400a8c0 at syllablefb783>
>
>Hello!
>
>You have received an iTunes Gift Certificate in the amount of $50.00
>
>Then you need to open iTunes. Once you verify your account, $50.00 will be credited to your account, so you can start buying music, games, video right away.
>
>https://docs.google.com/leaf?id=0BxwkuMlR0FFdODYyZTRiNjItMzE0OC00NmI4LTg4NDgtODQ3NjRhYjA1NTE1
>
>iTunes Store.

It's the same setup.exe file, which according to virustotal.com is this badness:
http://www.virustotal.com/analisis/39ac2d709e3f62b56ae3827ad834c631abe2353f605d87f24a8eeac53fab8d68-1273765424

Thanks and a tip o' the hat to Donald Smith for that pointer! 

Bill.