Date: Fri, 4 May 2012 -04:52:32 -0800The malware is hosted on 18.104.22.168/showthread.php?t=34c79594e8b8ac0f (Singlehop, US) which is a very heavily obfuscated exploit page with a not very impressive VirusTotal detection rate of 2/42. Blocking the IP is a good proactive step to stop this from being a problem.
From: LinkedIn Password [firstname.lastname@example.org]
Subject: Reset Your LinkedIn Password
Can’t remember your LinkedIn password? No problem - it happens.
Please use this link to reset your password within the next 1 day:
Then sign in to LinkedIn with your new password and the email address where you received this message.
Thanks for using LinkedIn!