Times New Roman  ArialFrom :Arial (address is spoofed) ArialSubject :Arial (blank) ArialBody Text:Arial Arial • new price Arial There is indication in the file that it may also try to password-protect some ZIP files, in which case it will add one of the following to the message body: Arial • The password is Arial • Password: Arial The password will then be contained in an embedded image file. ArialAttachment:Arial (may be one of the following) Arial • price.zip Arial • price2.zip Arial • price_new.zip Arial • price_08.zip Arial • 08_price.zip Arial • newprice.zip Arial • new_price.zip Arial • new__price.zip Arial The ZIP file contains PRICE.EXE and PRICE.HTML, as described above. Arial0000,0000,FFFFFor more information see: http://vil.nai.com/vil/content/v_127423.htm ArialInformation Security Services ArialUniversity of Oklahoma ArialHealth Science Center Arial0000,0000,FFFFhttp://www.ouhsc.edu/it/security/