You could make it harmless but not a valid cURL, also. Something that just prints to the screen that there's a good chance it was downloaded by the original mal

You could make it harmless but not a valid cURL, also. Something that just prints to the screen that there's a good chance it was downloaded by the original malware and points you to a page on haxx.se where you can get the real version.