After looking over a large sample of e-mails, my little group of e-mails turned out to be a tweaked version of this:

http://www.symantec.com/avcenter/venc/data/w32.beagle.w@mm.html