One of the checks I always do for email links is to mouse over the link and check the address. For example, There's currently an email in my Junk folder purporting to be from Santander Bank.

The From: address is Customer.service@santander.co.uk, but the link to click is nasteviwedding.com/install/form.asp.php (with the usual http://www prefix)

I don't think so, thanks!

BTW, I use Avast! AV in my virtual WinXP installs - it reports no nasties detected in the 3 years since I installed it. But then, I don't let real Windows anywhere near the internet.

Phil