Here's the spoof message, and if you get, it don't run the .EXE file, because it probably undoes the NAV protection against the awful Sobig worm.
Here is the text of the emal. µ
October 06, 2003
Intruder Alert 4.1 W32_Webb_Worm Policy
This policy detects the propagation of the W32.SobigF.Worm through changes in the registry.
W32.Webb.F@mm is a mass-mailing, network-aware worm that sends itself to all the email addresses it finds in various files. The worm uses its own SMTP engine to propagate and attempts to create a copy of itself on accessible network shares, but fails due to bugs in the code.
In attachment you can find program that update your Norton Antivirus to Norton Antivirus 2004.
Sign up for INQbot – a weekly roundup of the best from the INQ