This explains the actual spamvertized page (main.htm,
pay.htm, thanks page, sorry page and download).

FILES AND DESCRIPTIONS:
-----------------------

 xxxxxx.1, xxxxxx.2
 
 "1" files are raw downloads including headers
 "2" files are whay my browser sent to get the files
 

main.1/main.2:     main.htm
lib.1/lib.2:       mainlib.js
scr.1/scr.2:       mainscr.js
cdsetup.2:         cdsetup.exe
***cdsetup.exe:    The downloadable programme
                   (without the http headers)
                   OMITTED for space reasons
                   (2Meg in size)
pay.1/pay.2:       pay.htm
sorry.1/sorry.2:   sorry.htm
thanks.1/thanks.2: thkscc.htm

main: Neat version of main.htm
pay:  Neat version of pay.htm
lib:  Neat version of mainlib.js

all: concatenation of main.htm, pay.htm and mainlib.js

all.dec:   Decrypted version of all.
all.final: Decrypted and de-obfuscated version of all.

0.html:      Page to decode mainscr.js (load into Netscape to use it).
mainscr.dec: Decoded strings from mainscr.js

script: mainscr.dec modified to be an ex script to convert all to all.dec
        (vim 6.0 in non-compatible mode)

thanks.all:   thanks.htm and mainlib.js
thanks.dec:   running "script" (ex script) on thanks.all gives this.
thanks.final: Deobfuscated JavaScript URL to show location of download file.
part2.txt:    Description of how it works.