One of my customers received this email today from
Dear user of the customers domain name mailing service!
We are informing you that because of the security upgrade of the mailing service your mailbox (users email address) settings were changed. In order to apply the new set of settings click on the following link:
http: //users domain name/owa/service_directory/settings.php?email=user@users_email_address&from=users domain name&fromname=email_user_name
I found some additional info here blog.mxlab.eu/2009/10/14/zbot-variant-masked-as-settings-file-for-ms-outlook/
and thought it may be useful to other people that are unaware of it, I sure wasnt…