The most clever one i heard about was the yahoo.com one. People would open it thinking it was a link to yahoo but it ran commands.