I got an email similar to that with a 45K scr attached, submitted it to Symantec, and it turned out to be a variant of Yaha.