They are getting sneakier here is a copy of the e-mail that my company got sent ( with the worm. I saved a copy first then scanned the Zip first and caught it (even though it looked like it was from a trusted source.
Dear user of IPNS.com gateway e-mail server,
Our main mailing server will be temporary unavaible for next two days,
to continue receiving mail in these days you have to configure our free
auto-forwarding service.
Further details can be obtained from attached file.
In order to read the attach you have to use the following password: 78600.
Cheers,
The IPNS.com team http://www.iPNS.com
ATTACHED WAS A FILE CALLED INFO.ZIP