From: "Geo." 

"Mike N."  wrote in message
news:fif1d0thmiqf10l83or1u1m5v7bnltbbme{at}4ax.com...

>   I think it was 1voicemailbox.net  (including the 1).   They seem to not
> respond to user agents other than IE.

I had to use TelHTTP to figure it out, the thing does a frames box then
redirects one frame to a javascript which loads another java script that
uses the adodb exploit to load and execute w_e_d.exe file.

I sent the exe to the AVG virus labs, it appears to be some sort of proxy
or something from what I can gather (a few folks tried decompressing and
examining it).

Geo.

--- BBBS/NT v4.01 Flag-5