Friday, April 9, 2010

How To Write A Simple Batch (.bat) File

Batch files are the computer handyman’s way of getting things done. They can automate everyday tasks, shorten the required time to do something, and translate a complex process into something anyone could operate.


Since automation programs like AutoHotKey exist, many people have never written or taken the time to understand bat files, and many don’t even know what they do.


In this article, I’m going to show you how to write a simple batch file and present some basics that a user will need to understand when writing one. I’ll also provide you with a few resources for learning to write batch (.bat) files in case you’d like to go further.






Let’s say that you frequently have network issues; you’re constantly getting on the command prompt and typing in things like “ipconfig” and pinging Google to see what the problem is. After a while you realize that it would be a bit more efficient if you just wrote a simple BAT file, stuck it on your USB stick, and used it on the machines you troubleshoot.


Step 1: Create A BAT File


Create a new text document on your desktop. Double click the file – it should be blank inside. Now, go to file>save as, and in the “Save As” window, input a name for your BAT file and then add a “.bat” on the end (without the quotes). My file was named testBAT.bat, for instance.


Before hitting save we need make sure that Windows doesn’t stick the standard “.txt” ending on the end of our new file. To do this, change the filetype from “.txt” to “all files” as shown in the screenshot below. That’s it – hit save and close the file.



Step 2: Learn Some Quick Code


If you know how to run commands in the command prompt, you’ll be a wiz at creating BAT files because it’s the same language. All you’re doing is telling the command prompt what you want to put in through a file, rather than typing it every time you run the command prompt. This saves you time and effort; but it also allows you to put in some logic (like simple loops, conditional statements, etc. that procedural programming is capable of conceptually).


There are SEVEN simple commands I want to familiarize you with for this program. Commands are NOT case sensitive, so don’t worry about that.


TITLE - The Window name for the BAT file.


ECHO - the “print” statement for BAT files. Anything following the word ECHO will be displayed in the command prompt as text, on its own line.


ECHO OFF – BAT writers typically put this at the beginning of their files. It means that the program won’t show the command that you told it to run while it’s running – it’ll just run the command. I’d recommend that after you run this test program, you try removing this line from your code to see what happens.


PAUSE - This outputs the “press any key to continue…” message that you’ve seen all too many times. It’s helpful because it pauses the BAT file execution until the user tells it to go again. If you don’t put this in your program, everything will speed by and end before you can see it. People typically put this in BAT files to give the user a chance to review the material on the screen before continuing.


CLS - Clears the DOS window (helpful if things get too cluttered!).


IPCONFIG – Outputs a lot of network information into your DOS box (network admins have dreams solely based off this command).


PING - Pings an IP, letting you know if your computer was able to contact it. This command also returns the latency (ping time) and by default pings three times.


Step 3: Do Some Quick Logic


We need to plan our program out. Any good programmer will think about the general framework of their program before they dash into things – it prevents them from making logic mistakes that are hard to back out of.


For this program, we want to check the computer’s network/internet settings with an “ipconfig /all” command, and then review that information by giving the user time to read everything. Afterwards, we want to ping google.com to figure out if we really truly have access to the internet. We’ll pause the program after this as well, because we want to know for sure that they saw it. OK. Very simple program, very simple logic. Let’s write some code.


Step 4: Write Your BAT File


Right click your BAT file and click “edit” to bring up Notepad. The whole document should be blank – ready for some epic programmer input.


Rather than walking you line by line through the code (it’s extremely short) I’m going to use a code comment (example– CODE ::Comment) to let you know what we just did.I’m putting the actual code in bold to make things a bit easier to process.


———–Start Code———–


ECHO OFF


::CMD will no longer show us what command it’s executing(cleaner)


ECHO As a network admin, I’m getting tired of having to type these commands in! Hopefully, this saves me some time in the long run.


:: Print some text


IPCONFIG /ALL


:: Outputs tons of network information into the command prompt


PAUSE


:: Lets the user read the important network information


PING www.google.com


:: Ping google to figure out if we’ve got internet!


ECHO All done pinging Google.


::Print some text


PAUSE


:: Give the user some time to see the results. Because this is our last line, the program will exit and the command window will close once this line finishes.


———–End Code———–


Step 5: Run Your BAT File


Save the file you just coded (or copy/paste mine in, it will run as written), and double click it. Your output should be something like the screenshot below.






Congratulations! You’ve written a batch file successfully.

How to Run .BAT Files Invisibly, without Displaying the Command Prompt Window

Batch files (.BAT) and Windows NT Command Script (.CMD) files run in console window when double-clicked. This means that the Command Prompt window will be visible until the .BAT/.CMD file execution is complete. To make .BAT or .CMD file execution less intrusive, you can configure it to run minimized. Or if the .BAT or .CMD file does not require user input during run time, you can launch it in invisible mode using a Script. Both options are discussed below.
Running .BAT or .CMD files in minimized mode
1. Create a shortcut to the .BAT or .CMD file. To do so, right click on the file, click Send To, Desktop (create shortcut)
2. Right click on the shortcut and choose Properties
3. In the Run: drop down, choose Minimized
4. Click OK
5. Double-click the shortcut to run the batch file in a minimized window state.
Running .BAT or .CMD files in invisible mode
Windows Script Host’s Run Method allows you run a program or script in invisible mode.
Sample Code
Set WshShell = CreateObject("WScript.Shell")
WshShell.Run chr(34) & "C:\Batch Files\syncfiles.bat" & Chr(34), 0
Set WshShell = Nothing
Copy the lines above to Notepad and save the file with .VBS extension. Edit the .BAT file name and path accordingly, and save the file. Double-click the .VBS file to run it.

Wednesday, April 7, 2010

Built-in Windows commands to determine if a system has been hacked


1) WMIC: A world of adventure awaits

C:\> wmic process
C:\> wmic process list brief
C:\> wmic process list full
C:\> wmic startup list full
C:\> wmic process list brief /every:1
Hitting CTRL+C will stop the cycle.

2) The net command: An oldie but a goodie

3) Openfiles: Deep scrutiny

C:\> openfiles /local on
C:\> openfiles /query /v
C:\> openfiles /local off

4) Netstat: Show me the network

C:\> netstat -nao
C:\> netstat –s –p icmp
C:\> netstat –na 2

5) Find: Searching output for useful stuff

C:\> wmic process list brief /every:1 | find "cmd.exe"
C:\> wmic startup list brief | find /i "hklm"

Researching output

With these five tools, users can get a great deal of information about the configuration and security state of a Windows machine. To use each command in identifying a compromise, however, a user needs to compare the current settings of the machine under analysis to a "normal," uninfected machine.
For detailed use of the commands and interpreting outputs read this


How to hack websites using Auto SQL I Helper V.2.7 + with images


This is just tutorial that I just want to show you how we can hack a website, But just keep in mind that its for your study purpose only ;) 




In this method I'm not sure you can hack or crack all the website as because there are many other backround SQL injection protector running over the main servers or the sub-domain server...

Anyway lets start;

At the beggining "SQLIHelperV. 2.7" is a tool that will hack vulnerable websites using SQL injection. You don't have to spend hours and hours trying to find your way in a website and trying hundreds of combination and codes to hack a website.
This tool will do it all by itself. You only have to tell her what do and where to look.
You can download it from here:

http://www.mediafir e.com/download. php?htnymnutztb

first you need to find the potential website that you think it might be possible to hack it. Remember that some websites are simply non-hackable.
After you find your website ( better to end with "article.php? id=[number] " ) example: "http://encycl. anthropology. ru/article. php?id=1"

I will explain my tutorial on how to hack this website.

Check if your website can be hacked by trying to go this address :
http://encycl. anthropology. ru/article. php?id='1 <------ notice the ' before the number 1. you should get this message: Code: Query failedYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'1 ORDER BY lastname' at line 1 SELECT * FROM person old WHERE id=\'1 ORDER BY lastname


This mean that this website can be hacked because you get an error.

Now open your SQL I Helper V.2.7 and write the link :
http://encycl. anthropology. ru/article. php?id=1 <---- without the ' here and press the inject button. Now you should wait until the tool finish searching for columns .Time may vary depending on your connection speed , your pc speed , and the number of columns in the website. So now you should have this:
then select "Get database" and you get this:

Now select any element from the "database name" box and press the "Get tables" button , I will select "anthropo_encycl" :

then select any element from the "table name" box and press the "Get columns" button , I will select "user":

then select any elements you want from the "columns name" box and press "Dump Now" , i will select "usr_login" and "usr_pass"

After clicking "Dump Now" , you should see this new window

Now copy the hash on a peace of paper and go to this website:
http://www.md5crack .com/

Enter the hash and press the button "Crack that hash baby!" and you should get the source of the hash.
hash:21232f297a57a5 a743894a0e4a801f c3
username: admin

hash:202cb962ac5907 5b964b07152d234b 70
pass: 123

I know it's bit hard to understand if you are a non-IT person.


Dangers of Internet Dating


The day has come when internet dating is considered a legitimate way of meeting new people in the endless search for the right person. Chat rooms have replaced bar rooms, and internet dating sites and personal ads no longer have the "stigma" that they once did. You may still get a raised eyebrow when telling people you are using the internet for your search for the perfect date, but no where close to the reaction you would have gotten years ago. Internet dating has gained popularity by leaps and bounds, and unfortunately, so have the dangers and horror stories some have encountered.

The anonymity of internet dating has afforded con artists a new playground for scams, and has allowed people to be anyone they think you want them to be because they are engaging you primarily through the written word. This site is not meant to bring forth the message that its impossible to find love through internet dating, but to inform people of the dangers that are out there. Internet dating is still a relatively new way of people connecting with people from all over the globe, and people need to understand the dangers out there so they can make their search a safe one. Included in this site or stories from those that have been there, and are willing to share their experiences with others in an effort to educate people and learn from their mistakes. If you have a story and would like to share your experiences with internet dating and dating websites please feel free to email it to us!

Internet dating has been portrayed mostly with "success stories", because many of those who have had bad experiences are too embarrassed to talk about them openly, thinking they are the rarity, or the "unlucky one".  Movies and T.V. have also focused on the lighter side of internet dating and dating websites as opposed to the darker side. What's tricky here is people WANT to believe they are going to find what they are looking for (nothing wrong with that) and DON'T want to believe someone may be lying to them or playing games. They think they are "too smart" to fall for b.s., and it is that attitude that leaves them wide open to be proven wrong. If you are planning to surf the internet with high hopes and expectations, arm yourself with the knowledge of what to avoid and what to watch out for, so you have the best possible chance of a positive outcome.

Unfortunately there are many hidden dangers in the world of internet dating, and it's up to you to recognize the signs and red flags so that your internet dating experience stands the best chance of success, rather than leaving a bad taste in your mouth.

The internet dating "scene" is one of the easiest places for someone to cheat on their spouse or significant other, or to use the internet dating area as a place for promiscuity. The danger of long-distance internet romance is it is extremely easy for someone already involved with a partner to go out and cheat in a relatively safe (for them) environment. Get a secret email address, create a persona, and have a cel phone and, if necessary a p.o. box and your all set!!! Many times, before someone can verify that all they have been told over the internet by someone they are interested in dating is the truth, they are already emotionally vested and don't want to hear the truth, or get hurt by hearing the truth. You must realize the internet dating scene can be dangerous to those who don't take it seriously, and for those too trusting in nature. Please read further in the site to arm yourself with the knowledge you need to internet date safely, watch out for the signs of danger, and pay attention to EVERY red flag you see!!

Internet dating has proved to be successful for some, but statistics show it is not always successful for many, and the price for their internet dating experience in spades. The numerous horror stories of bad internet experiences can range from the humorous, to the deadly. If you have decided that you really want to try internet dating, remember to take it seriously, and play it safe. There are many numerous internet dating websites, that offer a variety of options, pick one that is right for you. The costs of internet dating websites  vary also, so shop around for the best value. You can also post or answer personal ads to meet your internet date. Many of these sites are free, with a simple registration. Internet dating websites often have numerous testimonials on their websites of how they met their soulmate or spouse using their internet dating service. What they won't put on their site however, is testimonials from people who have had bad experiences. Those you will find here! Please read our internet scam victims stories pages, and perhaps you can avoid an internet dating situation like they went through, or, if you have had a bad internet dating experience you wont feel so alone! Please feel free to send us your internet dating experiences with your permission to post your story.

We recently received the following letter from Carolle, who gave us permission to print her story:
"I was fooling around on the internet sending emails back and forth to some girlfriends of mine. One friend kept pressuring me to try internet dating since my dating life seemed to be going nowhere fast. She sent me an internet dating website and we started going through the profiles, and she helped me to make a profile of my own. We decided to leave it to fate and go through the ones that contact me first. This was how I met Matt, who lived in another state, but said he put an ad in mine because his job was re-locating him this year, so he may as well look for love where he was going to be living. This sounded reasonable at the time, but now, looking back on it, this was red flag number 1. We exchanged emails with more and more frequency, and seemed to have a lot in common. He asked for my phone number and I asked for his instead. He said that since he was moving he had disconnected his home phone number and only used his cel in preparation for his move. Again, this sounded like no problem, but should have been red flag number 2! We chatted on the phone, and he seamed anxious to meet, and said he would be in my area because he would be house hunting in a few months. So, we kept talking on the phone, and I began to notice he didn't answer my calls mainly during evenings and weekends. He said since work was paying for it, he had to limit his evening and weekend calls. Once again, this guy had an excuse for everything, and I should have seen this as red flag number 3! I went back on the internet dating site, and saw his profile was still active, even though we spoke everyday and planned to meet next month! (This red flag I did pay more attention to.) A friend told me she was writing to some men on the internet dating site from out of state, I decided just to browse, just to see what was out there. Guess who was? Matt was! He was in several different states, with several different "handles" but the one thing he did was keep the same photo. So, I asked my friend to help me set up a phony profile on the internet dating site to try and find out what he was up to. I wrote to him pretending to be a woman from a different state, far away from where I lived. We wrote back and forth and I got an email from him saying how he was going to be moving to THAT state in a few months, and was going to be in THAT area because THAT was where he was moving! I was fuming, I realized this was all a bunch of lies, this man was never moving to my town or any other, he was just using this internet dating site as a way to make false promises to women looking for something long term, it is obvious he had no plans to deliver! Now when I go to the internet dating sites, I only choose people that live in my area NOW. I recommend people looking for a long term relationship to start in their area!"

Internet fraud.


Internet fraud. Education is the best defence, please warn your friends.
Well done, you were right to be suspicious!! Most users of the Internet are nice people but, as in any large population, detestable creeps sometimes emerge from the shadows. Some notes on current fraud techniques follow but check the linked pages for more detail on the false names, company titles and methods used by the criminals:

You may not be aware that if you live in Britain (or elsewhere in Europe) you are already an unwitting victim of the Nigerian scammers. The European Community gives several million Euros each year to Nigeria, in order to fund anti-fraud initiatives. So far as we can see, this money is wasted . The Nigerian EFCC does not even seem able to run a useful website. If you are British, Nigerian fraud will soon be costing you even more. You will be paying for a National Fraud Reporting Centre and other government initiatives which, sadly, we do not expect to have an impact on the huge problem of Internet fraud. Taxpayers (and fraud victims) would be far better served if governments attended to the Western Union problem. This would cost us nothing and would virtually wipe out Internet fraud at a stroke.   
Overseas representive scam (fake job offer fraud). Do not accept an invitation to receive funds, keep 8-10% and then send the remainder to a foreign address via Western Union. American and British users of job seeker websites most at risk. U.S. victims have been arrested after banking (in good faith) the forged checks they received.  
Nigeria. Despite the false European sounding names and fake addresses in London, Holland and Spain, most of the criminally inspired junk mail you receive will have been sent by Nigerian criminals. Nigeria, in West Africa, is the world's 8th largest petroleum exporter, the world capital of child trafficking (UN report, 2004) and the centre of a huge criminal web. A July '05 report in the Christian Science Monitor noted that "According to the World Bank, corruption has meant that 80 percent of Nigeria's oil and gas revenues goes to 1 percent of the population, while 70 percent of the country's 133 million people still live on less than $1 a day". Ironically, Nigerians are the greatest victims of Nigerian fraud crime. An audit published in 2006 reveals that over a five year period there were huge discrepancies between the oil revenues declared by the Nigerian government and the amounts actually remitted by the international oil companies. Apparently, for at least part of the five year period, a previous president of Nigeria was the oil minister!  Reporting a 2007 fraud attempt to us, a European firm wrote "For our company the African continent is dead. We have taken the decision not do do business in Africa any more".
The "you are a lottery winner" is still their favourite approach (now closely followed by the fake job scam) but they will also target small Web businesses, placing orders with stolen credit cards. Traders soon find that they are charged back by the card company, but only after they have sent goods to Victoria Island, Lagos, Nigeria, for example. (If you have recently reported such a fraud to the Nigerian authorities, the writer would like to hear from you. The criminals will sometimes ask for payment to bank accounts. I am especially interested to know details of these and will pass along relevant  information to the appropriate agencies.) Note: it would be wrong to tar all Nigerians with the same brush. As far as the writer can tell, the Muslims of the north are innocent of Internet fraud. The offenders are mainly from the south of the country and their base is Lagos. (Opinions vary as to whether members of the Yoruba or the Igbo tribes are the worst offenders.) Population numbers are unknown but Lagos vies with Mexico City for the title of largest city in the world.
A nasty little variation - The death threat scam:
yusuf bello <yusufbello1@gmail.com>.   Jacks Hitler (Everyones Nigtmare, sic) servicesforsuspension@yahoo.cn.  balack.woodaka000@hotmail.fr  Bclack Wood. Pirlo Carlos, Death Roll Squad,  dealthrollsqd@aol.com. Sniper Orlando, sniper_orlando@live.com.  Balack Wood, af2543@gmail.com.  Jacks H. Killer, wwups@live.com. Celestine chuks, b.patbulle2121@gmail.com.  William yahman, Assassin, mayhissolrestinpeace@yahoo.fr.  Anthonio Benito, final.bulletpointserviceemail@gmail.comsarakukill@gmail.comexecutorjaja@hotmail.com.  KLosson Williams <deskofklossonwilliams@yahoo.com.hk> aka agentklosson@yahoo.com.hk .  Aziz Manasawala, <bemorecearfull@yahoo.it>.  Mr No Name I am Sorry <hubby.tokill8@gmail.com>,  hubby_tokill1@yahoo.co.uk. "clifford avuz the only man seer from london living in usa I am a murderer. i was been paid to kill you and you family by one of your friend's" shawn_welsh90@yahoo.it, <shawn_walter04@hotmail.co.uk>  (in fact he is mailing from Lagos, Nigeria ) .  rip09.20008@gmail.com. musa_husan01@yahoo.co.uk aka <rickymart_lee@yahoo.co.uk>.  <mohammediyakub008@gmail.com> aka mohammediyakub2008@hotmail.com , Hired Killer Message <hiredkillermessage@ymail.com>. mohammediyakub008@hotmail.comharold.kumeski@gmail.com.  
 
Tax refund scam: Francis V., Internal Revenue Service, refundatione.co.za.www34.cpt2.host-h.net. "HM Revenue & Customs", <ec@gye.memoser.com> (be careful to check the reply-to address, in this case the mail service provider is in Ecuador!)
If you are buying or selling goods or a service on the Web - take care (especially if you advertise something on CraigsList or Loot). The criminals are likely to make you an offer! They will send you stolen or forged cheques. You will spot some strange requests for shipping and payment. They are using "Alert Pay" and "AlertPay International Money Order" in their mail. Let the writer know if you are in doubt, but a request for movement of funds via Western Union will strongly indicate a fraud attempt .

 

The Nigerian Scam (or 419 Advance Fee Fraud). Be warned, they promise millions but first you have to pay ...

These pages carry sizeable lists of the names and titles attached to some of the criminally motivated junk mail you may have received. The lists can never be exhaustive because the scammers invent new identities every day but many of them use the techniques described here.
 This page: Money Laundering fraud, see also Lottery winner fraud , Primer on Internet fraud and
Fraudsters haunting dating/matchmaking websites. The fake job offer fraud.  The Bank Accounts ...
A rich relative, hitherto unknown, has died in Africa leaving millions of dollars unclaimed. An African "lawyer" wants you to inherit - but you first have to pay fees via Western Union. Yeah ..

Fake money picture often sent by the fraud criminals. These are what they call "trunk boxes".  
The criminals will send junk mail using anonymous e-mail addresses they picked up from Yahoo, Hotmail, Myway, Netscape and other mail service providers. They might say that they represent a toppled African dictator, or a bank administering the estate of a rich expatriot who died in a "ghastly accident". Millions of dollars would be released when you forward your bank details along with current address and telephone number. They will say something like "Remember to keep this information top secret". They actually mean to say that they don't want you to mention their approach to the police or the writer! They like to call themselves doctor, barrister, pastor or engineer and often pretend to be women. They write in a laughable cod legal style and love to use words like "modalities" and "fiduciary". N.B. The fraudsters will often include a link to a news website with details of a plane crash or some other tragic event.
If you were tempted to reply to such mail, you would soon be asked to pay a "processing fee" of several thousand euros or the equivalent in dollars. If you are based in Europe, you might be invited to hand over the money in Amsterdam or pay via an untraceable Western Union service. Your money would be lost, but you would be sure to receive further tempting offers in the future! NB If you tell them you cannot send the fee they require, they might send you a cheque for a larger sum so that you can bank this and then pay them the "handling fee". Given time, you will find that their "cheque" is worthless. They know that it will be a while before your bank gives you the bad news, and they rely on you sending them money before you know the awful truth. TIP: When in doubt, ask your bank for "express clearance" of a cheque (although even this may not guarantee your safety). Oh - and never , ever send money via Western Union, unless to a person you know very well.
A variation on the classic fraud approach (June 2005). The turgid style is typical.  
From the Desk of:
ENGR. PAUL MABUZA, DIRECTOR PROJECT IMPLEMENTATION, DEPARTMENT OF MINERALS & ENERGY, NESLSON (sic) MANDELA BUILDING, PRETORIA SOUTH AFRICA.

Dear Friend,
URGENT BUSINESS PROPOSAL
It is my great pleasure in writing you this letter on behalf of my colleagues. Your particulars were given to me by a member of the South Africa Export Promotion Council (S.E.P.C) (They seem to think that these bracketed initials will impress, and use them often.) who was with the federal government delegation to your country during a trade exhibition. I have decided to seek a confidential co-operation with you in the execution of the deal described hereunder for the benefit of all parties and hope you will keep it as top secret (He does not want you to talk to a friend who might know all about these scams.) because of the nature of this business.

I am ENGR. PAUL MABUZA, (They like to give themselves a title! Engr., Barrister, Pastor, Dr., are favourites.). Director Of Project Implementation, South Africa Department of Minerals & Energy I am making this contact with you, based on the committee's need for an individual/company who is willing to assist us in the execution of this business. Within the Department of Minerals & Energy, where I work as a Director of the Project Implementation and with the good co-operation of four other top officials, we have in our possession as over due payment bills, totaling Twenty One Million, Five Hundred Thousand United States Dollars (US$21,500,000) (About average for a fraud e-mail.) Which we want to transfer abroad with the assistance and co-operation of A Foreign Company/individual to receive the said funds on our behalf. More so, we are handicap in these circumstances, as the South African Civil Services code of conduct does not allow us to operate an offshore account. Hence your importance in this transaction.
This amount $21.5Million represents the balance of the total contract value executed on behalf of my ministry by a Foreign Contracting Firm, which we the Officials over invoiced deliberately. Though the actual contract cost has been paid to the original contractor, leaving the balance in the tune of the said amount, which we have in principles gotten approval to remit by Key Tested Telegraphic Transfer (K.T.T)?. to any Foreign Bank Account you will provide by filing an Application through the Ministry Of Justice here in South Africa, for the transfer of rights and privileges of the former contractor to you. (All sounds very straightforward, but once the bait is taken the scam becomes more convoluted and the victim will be asked to send money for "legal fees" or "insurance" to a newly introduced fictitious firm. This is the advance fee, hence "the Advance Fee Scam". Western Union will be the criminal's money transfer agency of choice.

I have the Authority of my partners involved to propose that you should be willing to assist us in this transaction, your share of the sum is 30% of the $21.5Million, 60% for us and 5% for taxation and miscellaneous expenses and remaining 5% will be for charity organization. The transaction it
self is 100% safe, on your part provided you treats it with utmost secrecy and confidentiality. Also, your area of specialization is not a hindrance to the successful execution of this transaction. I have reposed my confidence in you and hope that you will not disappoint me. I want to assure you that my partner and myself are in the position to make the payment of this claim possible, provided that you can give us a very strong assurance and guarantee that the funds will be secured and please, remember to treat this matter very confidential, because we will not comprehend with any form
of exposure as we are still in active Government service. Please, reply me on my confidential email address: mabuza_p07adb@yahoo.com (So confidential that he has mailed it to potential victims around the world!) or call / fax your response directly to my. Tel: 27-73-714080 OR Fax No.:27-11-507 6944.
Once again, remember that time is of great essence in this transaction . I wait in anticipation of your fullest co-operation.

Thank you for your co-operation.
Yours Faithfully, ENGR. PAUL MABUZA