What you do is go to a site, and dl their malware into a sand box. Email that as an attachment, and the deed is done.
Same for linking it in a signature, or just a random link from a forum page... The one 008 left asked for a plugin dl, That's why I asked. I have all my plugs in, and shouldn't see that. I'm not making any accusation just saying it's unusual on my set.