Date: Wed, 14 Dec 2011 05:36:48 +0900
From: "LinkedIn" [firstname.lastname@example.org]
Subject: ACH transfer suspended
The ACH transaction (ID: 137297301664), recently initiated from your bank account (by you or any other person), was rejected by the Electronic Payments Association.
Transaction ID: 137297301664
Rejection Reason See details in the report below
Transaction Report report_137297301664.doc (Microsoft Word Document)
13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100
© 2011 NACHA - The Electronic Payments Association
The malware is on badthen.com/main.php?page=977334ca118fcb8c hosted on 220.127.116.11 (Linode, US). Blocking the IP address will block any other malware domains on the same server.