This one appears to be malware in the attached zip file... (zip file name amended slightly so it cannot be downloaded accidentally!)
Return-Path: <m.cuerda@betelgeux.es>
Delivered-To: email addressed removed
Received: (qmail 42451 invoked by uid 1024); 18 Jan 2014 12:14:06 -0000
Received: from m.cuerda@betelgeux.es by server35.donhost.co.uk by uid 1002 with qmail-scanner-1.22
( Clear:RC:0(93.108.240.212):.
Processed in 0.033189 secs); 18 Jan 2014 12:14:06 -0000
Received: from unknown (HELO 212.240.108.93.rev.vodafone.pt) (93.108.240.212)
by server35.lb.donhost.co.uk with SMTP; 18 Jan 2014 12:14:05 -0000
Received: from 10.0.1.104 ([10.0.1.104])
Message-ID: <0C0F207C2E884937AB831DF6BDE038EA@terrymail>
From: "Customer Service" <m.cuerda@betelgeux.es>
To: "Client" <email addressed removed>
Subject: Bill Payment Reminder
Date: Sat, 18-Jan-2014 12:14:03 GMT
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1250";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
X-EsetId: 37303A292122BB64627562
Hello Madam or Sir!
We have prepared your annual kWh usage report for the year 2013. You've exceeded your limit for electricity usage.
To use a discounted energy tariff, please, discharge the indebtedness. Your updated electricity bill is available here
http://geoplan.co/bill/cast005673.xx.zip
Goodbye
Customer Service
