Yserver

2dc 384 WinMain 2dc 384 lpCmdLine: '-Embedding' 2dc 384 Run 2dc 384 lpCmdLine: '-Embedding' 2dc 384 nCmdShow: 10 2dc 384 ServerInit 0 2dc 384 VerifyRegistry 2dc 384 GetRegistryString 'Software\Yahoo\YServer' 'HomeDir' 2dc 384 returning 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 384 GetRegistryString 'Software\Yahoo\YServer' 'HomeDir' 2dc 384 returning 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 384 GetRegistryDWORD 'Software\Yahoo\YServer' 'Use Logfile' 2dc 384 RegQueryValueExt failed 2 for 'Use Logfile' 2dc 384 GetRegistryDWORD 'Software\Yahoo\Pager' 'Use Logfile' 2dc 384 RegQueryValueExt failed 2 for 'Use Logfile' 2dc 688 CountdownThread 2dc 384 leaving ServerInit 2dc 384 entering message loop 2dc 384 CYServerComponent::CreateInstance 2dc 384 Not aggregating; delegate to nondelegating IUnknown 2dc 384 CYServerComponent::CYServerComponent 2dc 384 the COM library asked for IMarshal 2dc 384 CYServerComponent::SetMaxConnections 3 2dc 384 CYServerComponent::IsServerRunning 2dc 384 CYServerComponent::StartServer 2dc 384 set gwGlobalErrorNumber to 0 2dc 384 server not running: starting server 2dc 384 StartWebServerThread 2dc 384 GetRegistryString 'Software\Yahoo\YServer' 'HomeDir' 2dc 384 returning 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 384 set gszHomeDir to C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 384 CleanupShortcutFiles 2dc 384 GetRegistryInt 'Software\Yahoo\YServer' 'KeepShortcuts' 0 2dc 384 GetRegistryString 'Software\Yahoo\YServer' 'KeepShortcuts' 2dc 384 RegQueryValueExt failed 2 for 'KeepShortcuts' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\. 2dc 384 no chars read 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\.. 2dc 384 no chars read 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398273781DSCN4053.jpg 2dc 384 returning '95D5082F3A285B8D9A19803EAEBCA38C' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398275406DSCN4056.jpg 2dc 384 returning '5268D066D50439376ABF400521B918E6' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398276421DSCN4057.jpg 2dc 384 returning 'EB8628AE21338B6FB6D7C60D98345B13'

2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398278609Imag045.jpg 2dc 384 returning '404DCC5C2F90A6FD740F45F34AE84B1C' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398279703Imag050.jpg 2dc 384 returning 'F202C3A2D79AB1DA2E649FB23E3DE1E1' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398300671Imag056.jpg 2dc 384 returning 'FB9BBE5EBD362B5228D65883522BC388' 2dc 384 ReadIniFileString 2dc 384 section: [Info] key: 'Timestamp' default: '' 2dc 384 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190398388125DSCN4061.jpg 2dc 384 returning '2AC23D9D400695F8EBFD896E8B1C50C9' 2dc 384 leaving CleanupShortcutFiles 2dc 3d0 ServerThread 2dc 3d0 GetRegistryInt 'Software\Yahoo\YServer' 'IPPort' 80 2dc 3d0 GetRegistryString 'Software\Yahoo\YServer' 'IPPort' 2dc 3d0 RegQueryValueExt failed 2 for 'IPPort' 2dc 3d0 set gnPort to 80 2dc 3d0 calling CreateThread for ListenerThread 2dc 3d0 ListenerThread ID: 0x2b0 2dc 2b0 ListenerThread 2dc 2b0 portno: 80 2dc 2b0 binding ip: -838752064 2dc 2b0 lcl_ListenSocket: 0x160 2dc 2b0 local IP addr: 192.168.1.206 2dc 2b0 local port: 80 2dc 2b0 calling bind 2dc 2b0 listen socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 calling listen 2dc 2b0 back from listen 2dc 2b0 listen socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 allocated a pool of 3 handles 2dc 2b0 AcceptAndHandleRequests 2dc 2b0 IsFreeEntryInThreadArray 2dc 3d0 ReportInitProgress 2dc 384 leaving StartWebServerThread 2dc 384 returned from StartWebServerThread, the return code is 1. 2dc 384 CYServerComponent::IsServerRunning 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 1

2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471781453collage.jpg?AppID=Messenger &UserID=mada_l0ve1&K=lc9luhmtnoqxb3ggskjytend59 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=863506A083C5CAC93A1FD9AFF3F85E82 2dc 384 2dc 384 2dc 384

wrote Timestamp=863506A083C5CAC93A1FD9AFF3F85E82 writing to ini file:

W=722032 M=1 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=1 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471781453collage.jpg?AppID=Messenger &UserID=mada_l0ve1&K=lc9luhmtnoqxb3ggskjytend59 2dc 384 szKey: lc9luhmtnoqxb3ggskjytend59 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1487 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 IsFreeEntryInThreadArray 2dc 2c0 HandlerThread 0x184 2dc 2c0 HTTPLog::HTTPLog 2dc 2c0 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 2c0 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 2c0 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 2c0 about to m_HTTPLog.SetSocket(m_sock) 2dc 2c0 HTTPLog::SetSocket starting... socket=388 2dc 2c0 HTTPLog::SetSocket exiting 2dc 2c0 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 2c0 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 2c0 about to create Kill Comm Event 2dc 2c0 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 2c0 HTTPRequestHandler::ReadRequest 2dc 2c0 HTTPRequestHandler::ReadRequest 2dc 2c0 received 1024 bytes 2dc 2c0 Found '\r\n\r\n' 2dc 2c0 allocating entity body buffer to store read overflow from header 2dc 2c0 761 bytes 2dc 2c0 15 ms elapsed 2dc 2c0 header is: 2dc 2c0 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 2c0 POST /Messenger.mada_l0ve1.1190471781453collage.jpg?AppID=Messenger&UserID=mada_l0ve1&K =lc9luhmtnoqxb3ggskjytend59 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206

Content-Length: 48160 Cache-Control: no-cache 2dc 2c0 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 2c0 m_pEntityBodyBuffer: 0x364600 2dc 2c0 m_dwEntityBodyBufferSize: 16384 2dc 2c0 m_dwNumBytesInEntityBody: 761 2dc 2c0 HTTPRequestHandler::ParseRequest 2dc 2c0 m_cRequest: POST 2dc 2c0 UnescapeName 2dc 2c0 DecodeURL 2dc 2c0 before: Messenger 2dc 2c0 before: Messenger 2dc 2c0 after: Messenger 2dc 2c0 UnescapeName 2dc 2c0 DecodeURL 2dc 2c0 before: mada_l0ve1 2dc 2c0 before: mada_l0ve1 2dc 2c0 after: mada_l0ve1 2dc 2c0 UnescapeName 2dc 2c0 DecodeURL 2dc 2c0 before: lc9luhmtnoqxb3ggskjytend59 2dc 2c0 before: lc9luhmtnoqxb3ggskjytend59 2dc 2c0 after: lc9luhmtnoqxb3ggskjytend59 2dc 2c0 extracted the filename from the URL. saving to m_cFileName: 2dc 2c0 '/Messenger.mada_l0ve1.1190471781453collage.jpg' 2dc 2c0 m_cFileName: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 ProcessYahooRequestParams 2dc 2c0 DecodeURL 2dc 2c0 before: Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 ValidateRequest 2dc 2c0 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'App' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'Messenger' 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'User' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'mada_l0ve1' 2dc 2c0 ReadIniFileInt 2dc 2c0 section: [Info] key: 'Post' default: 0 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 1 2dc 2c0 ValidateRequest: true 2dc 2c0 request is a Yahoo request 2dc 2c0 leaving ParseRequest 2dc 2c0 HandleFileReceive 2dc 2c0 file name: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 2c0 UnescapeName 2dc 2c0 DecodeURL

2dc 2c0 before: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 before: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 after: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 unescaped file name: /Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 HTTPRequestHandler::ReceiveRedirectedFile 2dc 2c0 HTTPRedirectHandler::HTTPRedirectHandler 2dc 2c0 GetBaseURL 2dc 2c0 bAddrContainsPort: 0 2dc 2c0 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471781453collage.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnoqxb3ggskjytend59 2dc 2c0 HTTPRedirectHandler::Process 2dc 2c0 ValidateKeys 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'Timestamp' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning '863506A083C5CAC93A1FD9AFF3F85E82' 2dc 2c0 szTimeStamp: '863506A083C5CAC93A1FD9AFF3F85E82' 2dc 2c0 CSecretKey::CSecretKey 2dc 2c0 szApp: Messenger 2dc 2c0 szUser: mada_l0ve1 2dc 2c0 szTimeStamp: 863506A083C5CAC93A1FD9AFF3F85E82 2dc 2c0 CSecretKey::Init(). 2dc 2c0 m_szAppID: Messenger 2dc 2c0 m_szUserID: mada_l0ve1 2dc 2c0 KeyMatches 'lc9luhmtnoqxb3ggskjytend59' 2dc 2c0 key comparison test passed... continuing 2dc 2c0 HTTPRedirectHandler::CheckRedirectFile 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 ReadIniFileInt 2dc 2c0 section: [Info] key: 'Dir' default: 0 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 0 2dc 2c0 set m_RType to RedirectTypeSingleFile 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'App' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'Messenger' 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'User' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'mada_l0ve1' 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'Version' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'MSG1.0' 2dc 2c0 ReadIniFileInt 2dc 2c0 section: [Info] key: 'Post' default: 0 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg

2dc 2c0 returning 1 2dc 2c0 m_szINIApp: 'Messenger' 2dc 2c0 m_szINIUser: 'mada_l0ve1' 2dc 2c0 m_szINIVersionString: 'MSG1.0' 2dc 2c0 m_iIsPost: 1 2dc 2c0 ReadIniFileInt 2dc 2c0 section: [Info] key: 'W' default: 0 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 722032 2dc 2c0 m_hWnd: 0xb0470 2dc 2c0 ReadIniFileInt 2dc 2c0 section: [Info] key: 'M' default: 0 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 1 2dc 2c0 m_nMsgNumber: 1 2dc 2c0 exit HTTPRedirectHandler::CheckRedirectFile 2dc 2c0 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 2c0 ReadIniFileString 2dc 2c0 section: [Info] key: 'Name' default: '' 2dc 2c0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471781453collage.jpg 2dc 2c0 returning 'C:\Documents and Settings\ianis\Desktop\collage.jpg' 2dc 2c0 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 2c0 m_bProcessed: 1 [success] 2dc 2c0 exit HTTPRedirectHandler::Process 2dc 2c0 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage.jpg. 2dc 2c0 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage.jpg. 2dc 2c0 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 2c0 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 2c0 m_hWndReporting: 0xb0470 2dc 2c0 m_nMsgNumber: 1 2dc 2c0 RedirectType: 1 RedirectTypeSingleFile 2dc 2c0 bIsPost: 1 2dc 2c0 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 2c0 SendMessage 0xb0470 2dc 2c0 IPCInfo: 2dc 2c0 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage.jpg' 2dc 2c0 cUserID: 'mada_l0ve1' 2dc 2c0 nStatus: 0 2dc 2c0 nType: YSERVER_IPC_BEGIN 2dc 2c0 lFileLen: 0 2dc 2c0 lCurrBytes: 0 2dc 2c0 nMessageNumber: 1 2dc 2c0 SendMessage processed 2dc 2c0 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 2c0 ReceiveFile 2dc 2c0 iContentLength: 48160 2dc 2c0 ReceiveEntityBody 2dc 2c0 temp: C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 2c0 dwBufSize: 16384 2dc 2c0 dwNumBufBytesUsed: 761 2dc 2c0 creating file C:\Documents and Settings\ianis\Desktop\collage.jpg 2dc 2c0 flushed 761 bytes

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0 2c0

PostInfoToApp YSERVER_IPC_RECEIVING 761 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 17145 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 33529 0 ReadEntityBodyChunk 14631 PostInfoToApp YSERVER_IPC_RECEIVING 48160 0 closing file C:\Documents and Settings\ianis\Desktop\collage.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 1 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 2c0 200 2dc 2c0 OK 2dc 2c0 sent: 2dc 2c0 <<<< 2dc 2c0 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 2c0 >>>> 2dc 2c0 leaving HandleFileReceive 2dc 2c0 GetRegistryDWORD 'Software\Yahoo\YServer' 'Use Logfile' 2dc 2c0 RegQueryValueExt failed 2 for 'Use Logfile' 2dc 2c0 GetRegistryDWORD 'Software\Yahoo\Pager' 'Use Logfile' 2dc 2c0 RegQueryValueExt failed 2 for 'Use Logfile' 2dc 2c0 HTTPRequestHandler::~HTTPRequestHandler 2dc 2c0 calling g_RQT.RemoveHTTPRQH, this = 3555216.

2dc 2c0 after calling RemoveHTTPRQH, count = 0. 2dc 2c0 closesocket: 0x184 2dc 2c0 HTTPLog::~HTTPLog 2dc 2c0 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 2 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage1.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471782421collage1.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnwgydh1j7hd6rzhff9 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage1.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage1.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=1006988642860FA09746DC5CBA6B43D2

2dc 384 2dc 384 2dc 384

wrote Timestamp=1006988642860FA09746DC5CBA6B43D2 writing to ini file:

W=722032 M=2 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=2 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471782421collage1.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnwgydh1j7hd6rzhff9 2dc 384 szKey: lc9luhmtnwgydh1j7hd6rzhff9 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1488 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x190 2dc 1a8 HandlerThread 0x1a0 2dc 1a8 HTTPLog::HTTPLog 2dc 1a8 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 1a8 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 1a8 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 1a8 about to m_HTTPLog.SetSocket(m_sock) 2dc 1a8 HTTPLog::SetSocket starting... socket=416 2dc 1a8 HTTPLog::SetSocket exiting 2dc 1a8 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 1a8 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 1a8 about to create Kill Comm Event 2dc 1a8 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 1a8 HTTPRequestHandler::ReadRequest 2dc 1a8 HTTPRequestHandler::ReadRequest 2dc 1a8 received 264 bytes 2dc 1a8 Found '\r\n\r\n' 2dc 1a8 0 ms elapsed

2dc 1a8 2dc 1a8 2dc 1a8

header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190471782421collage1.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtnwgydh1j7hd6rzhff9 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 43142 Cache-Control: no-cache 2dc 1a8 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 1a8 m_pEntityBodyBuffer: 0x0 2dc 1a8 m_dwEntityBodyBufferSize: 0 2dc 1a8 m_dwNumBytesInEntityBody: 0 2dc 1a8 HTTPRequestHandler::ParseRequest 2dc 1a8 m_cRequest: POST 2dc 1a8 UnescapeName 2dc 1a8 DecodeURL 2dc 1a8 before: Messenger 2dc 1a8 before: Messenger 2dc 1a8 after: Messenger 2dc 1a8 UnescapeName 2dc 1a8 DecodeURL 2dc 1a8 before: mada_l0ve1 2dc 1a8 before: mada_l0ve1 2dc 1a8 after: mada_l0ve1 2dc 1a8 UnescapeName 2dc 1a8 DecodeURL 2dc 1a8 before: lc9luhmtnwgydh1j7hd6rzhff9 2dc 1a8 before: lc9luhmtnwgydh1j7hd6rzhff9 2dc 1a8 after: lc9luhmtnwgydh1j7hd6rzhff9 2dc 1a8 extracted the filename from the URL. saving to m_cFileName: 2dc 1a8 '/Messenger.mada_l0ve1.1190471782421collage1.jpg' 2dc 1a8 m_cFileName: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 ProcessYahooRequestParams 2dc 1a8 DecodeURL 2dc 1a8 before: Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 ValidateRequest 2dc 1a8 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'App' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 'Messenger' 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'User' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 'mada_l0ve1' 2dc 1a8 ReadIniFileInt 2dc 1a8 section: [Info] key: 'Post' default: 0 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg

2dc 1a8 returning 1 2dc 1a8 ValidateRequest: true 2dc 1a8 request is a Yahoo request 2dc 1a8 leaving ParseRequest 2dc 1a8 HandleFileReceive 2dc 1a8 file name: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 1a8 UnescapeName 2dc 1a8 DecodeURL 2dc 1a8 before: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 before: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 after: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 unescaped file name: /Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 HTTPRequestHandler::ReceiveRedirectedFile 2dc 1a8 HTTPRedirectHandler::HTTPRedirectHandler 2dc 1a8 GetBaseURL 2dc 1a8 bAddrContainsPort: 0 2dc 1a8 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471782421collage1.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnwgydh1j7hd6rzhff9 2dc 1a8 HTTPRedirectHandler::Process 2dc 1a8 ValidateKeys 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'Timestamp' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning '1006988642860FA09746DC5CBA6B43D2' 2dc 1a8 szTimeStamp: '1006988642860FA09746DC5CBA6B43D2' 2dc 1a8 CSecretKey::CSecretKey 2dc 1a8 szApp: Messenger 2dc 1a8 szUser: mada_l0ve1 2dc 1a8 szTimeStamp: 1006988642860FA09746DC5CBA6B43D2 2dc 1a8 CSecretKey::Init(). 2dc 1a8 m_szAppID: Messenger 2dc 1a8 m_szUserID: mada_l0ve1 2dc 1a8 KeyMatches 'lc9luhmtnwgydh1j7hd6rzhff9' 2dc 1a8 key comparison test passed... continuing 2dc 1a8 HTTPRedirectHandler::CheckRedirectFile 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 ReadIniFileInt 2dc 1a8 section: [Info] key: 'Dir' default: 0 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 0 2dc 1a8 set m_RType to RedirectTypeSingleFile 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'App' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 'Messenger' 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'User' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg

2dc 1a8 returning 'mada_l0ve1' 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'Version' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 'MSG1.0' 2dc 1a8 ReadIniFileInt 2dc 1a8 section: [Info] key: 'Post' default: 0 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 1 2dc 1a8 m_szINIApp: 'Messenger' 2dc 1a8 m_szINIUser: 'mada_l0ve1' 2dc 1a8 m_szINIVersionString: 'MSG1.0' 2dc 1a8 m_iIsPost: 1 2dc 1a8 ReadIniFileInt 2dc 1a8 section: [Info] key: 'W' default: 0 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 722032 2dc 1a8 m_hWnd: 0xb0470 2dc 1a8 ReadIniFileInt 2dc 1a8 section: [Info] key: 'M' default: 0 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 2 2dc 1a8 m_nMsgNumber: 2 2dc 1a8 exit HTTPRedirectHandler::CheckRedirectFile 2dc 1a8 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 1a8 ReadIniFileString 2dc 1a8 section: [Info] key: 'Name' default: '' 2dc 1a8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471782421collage1.jpg 2dc 1a8 returning 'C:\Documents and Settings\ianis\Desktop\collage1.jpg' 2dc 1a8 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 m_bProcessed: 1 [success] 2dc 1a8 exit HTTPRedirectHandler::Process 2dc 1a8 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage1.jpg. 2dc 1a8 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage1.jpg. 2dc 1a8 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 1a8 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 m_hWndReporting: 0xb0470 2dc 1a8 m_nMsgNumber: 2 2dc 1a8 RedirectType: 1 RedirectTypeSingleFile 2dc 1a8 bIsPost: 1 2dc 1a8 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 1a8 SendMessage 0xb0470 2dc 1a8 IPCInfo: 2dc 1a8 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage1.jpg' 2dc 1a8 cUserID: 'mada_l0ve1' 2dc 1a8 nStatus: 0 2dc 1a8 nType: YSERVER_IPC_BEGIN 2dc 1a8 lFileLen: 0 2dc 1a8 lCurrBytes: 0 2dc 1a8 nMessageNumber: 2

2dc 1a8 SendMessage processed 2dc 1a8 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 ReceiveFile 2dc 1a8 iContentLength: 43142 2dc 1a8 ReceiveEntityBody 2dc 1a8 temp: C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 dwBufSize: 16384 2dc 1a8 dwNumBufBytesUsed: 0 2dc 1a8 creating file C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 ReadEntityBodyChunk 16384 2dc 1a8 PostInfoToApp YSERVER_IPC_RECEIVING 16384 0 2dc 1a8 ReadEntityBodyChunk 16384 2dc 1a8 PostInfoToApp YSERVER_IPC_RECEIVING 32768 0 2dc 1a8 ReadEntityBodyChunk 10374 2dc 1a8 PostInfoToApp YSERVER_IPC_RECEIVING 43142 0 2dc 1a8 closing file C:\Documents and Settings\ianis\Desktop\collage1.jpg 2dc 1a8 PostInfoToApp YSERVER_IPC_FINISHED 0 0 2dc 1a8 SendMessage 0xb0470 2dc 1a8 IPCInfo: 2dc 1a8 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage1.jpg' 2dc 1a8 cUserID: 'mada_l0ve1' 2dc 1a8 nStatus: 0 2dc 1a8 nType: YSERVER_IPC_FINISHED 2dc 1a8 lFileLen: 0 2dc 1a8 lCurrBytes: 0 2dc 1a8 nMessageNumber: 2 2dc 1a8 SendMessage processed 2dc 1a8 exit HTTPRequestHandler::ReceiveRedirectedFile 2dc 1a8 SendString 2dc 1a8 the file was received 2dc 1a8 200 2dc 1a8 OK 2dc 1a8 sent: 2dc 1a8 <<<< 2dc 1a8 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received

2dc 1a8 >>>> 2dc 1a8 leaving HandleFileReceive 2dc 1a8 HTTPRequestHandler::~HTTPRequestHandler 2dc 1a8 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 1a8 after calling RemoveHTTPRQH, count = 0. 2dc 1a8 closesocket: 0x1a0 2dc 1a8 HTTPLog::~HTTPLog 2dc 1a8 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 3 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage10.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471783140collage10.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnktds 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage10.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage10.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 384

wrote App=Messenger

2dc 384 2dc 384 2dc 384

wrote User=mada_l0ve1 writing to ini file:

Timestamp=D52ABA9CC577F03C554E1A744F4D7644 2dc 384 2dc 384 2dc 384

wrote Timestamp=D52ABA9CC577F03C554E1A744F4D7644 writing to ini file:

W=722032 M=3 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=3 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471783140collage10.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnktds 2dc 384 szKey: lc9luhmtnktds 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 384 leaving PostFile 2dc 2b0 IsFreeEntryInThreadArray 2dc 2b0 CloseHandle thread 0x19c 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1489 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 IsFreeEntryInThreadArray 2dc 39c HandlerThread 0x19c 2dc 39c HTTPLog::HTTPLog 2dc 39c HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 39c home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 39c m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 39c about to m_HTTPLog.SetSocket(m_sock) 2dc 39c HTTPLog::SetSocket starting... socket=412 2dc 39c HTTPLog::SetSocket exiting 2dc 39c about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 39c after calling g_RQT.AddHTTPRQH(this). total count = 1.

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

39c about to create Kill Comm Event 39c leaving HTTPRequestHandler::HTTPRequestHandler 39c HTTPRequestHandler::ReadRequest 39c HTTPRequestHandler::ReadRequest 39c received 1024 bytes 39c Found '\r\n\r\n' 39c allocating entity body buffer to store read overflow from header 39c 771 bytes 39c 15 ms elapsed 39c header is: 39c <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 39c

POST /Messenger.mada_l0ve1.1190471783140collage10.jpg?AppID=Messenger&UserID=mada_l0ve1 &K=lc9luhmtnktds HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 317224 Cache-Control: no-cache 2dc 39c >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 39c m_pEntityBodyBuffer: 0x364600 2dc 39c m_dwEntityBodyBufferSize: 16384 2dc 39c m_dwNumBytesInEntityBody: 771 2dc 39c HTTPRequestHandler::ParseRequest 2dc 39c m_cRequest: POST 2dc 39c UnescapeName 2dc 39c DecodeURL 2dc 39c before: Messenger 2dc 39c before: Messenger 2dc 39c after: Messenger 2dc 39c UnescapeName 2dc 39c DecodeURL 2dc 39c before: mada_l0ve1 2dc 39c before: mada_l0ve1 2dc 39c after: mada_l0ve1 2dc 39c UnescapeName 2dc 39c DecodeURL 2dc 39c before: lc9luhmtnktds 2dc 39c before: lc9luhmtnktds 2dc 39c after: lc9luhmtnktds 2dc 39c extracted the filename from the URL. saving to m_cFileName: 2dc 39c '/Messenger.mada_l0ve1.1190471783140collage10.jpg' 2dc 39c m_cFileName: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c ProcessYahooRequestParams 2dc 39c DecodeURL 2dc 39c before: Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c ValidateRequest 2dc 39c C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'App' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'Messenger'

2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'User' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'mada_l0ve1' 2dc 39c ReadIniFileInt 2dc 39c section: [Info] key: 'Post' default: 0 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 1 2dc 39c ValidateRequest: true 2dc 39c request is a Yahoo request 2dc 39c leaving ParseRequest 2dc 39c HandleFileReceive 2dc 39c file name: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 39c UnescapeName 2dc 39c DecodeURL 2dc 39c before: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c before: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c after: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c unescaped file name: /Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c HTTPRequestHandler::ReceiveRedirectedFile 2dc 39c HTTPRedirectHandler::HTTPRedirectHandler 2dc 39c GetBaseURL 2dc 39c bAddrContainsPort: 0 2dc 39c set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471783140collage10.jpg?AppID=Messen ger&UserID=mada_l0ve1&K=lc9luhmtnktds 2dc 39c HTTPRedirectHandler::Process 2dc 39c ValidateKeys 2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'Timestamp' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'D52ABA9CC577F03C554E1A744F4D7644' 2dc 39c szTimeStamp: 'D52ABA9CC577F03C554E1A744F4D7644' 2dc 39c CSecretKey::CSecretKey 2dc 39c szApp: Messenger 2dc 39c szUser: mada_l0ve1 2dc 39c szTimeStamp: D52ABA9CC577F03C554E1A744F4D7644 2dc 39c CSecretKey::Init(). 2dc 39c m_szAppID: Messenger 2dc 39c m_szUserID: mada_l0ve1 2dc 39c KeyMatches 'lc9luhmtnktds' 2dc 39c key comparison test passed... continuing 2dc 39c HTTPRedirectHandler::CheckRedirectFile 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c ReadIniFileInt 2dc 39c section: [Info] key: 'Dir' default: 0 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 0 2dc 39c set m_RType to RedirectTypeSingleFile

2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'App' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'Messenger' 2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'User' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'mada_l0ve1' 2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'Version' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'MSG1.0' 2dc 39c ReadIniFileInt 2dc 39c section: [Info] key: 'Post' default: 0 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 1 2dc 39c m_szINIApp: 'Messenger' 2dc 39c m_szINIUser: 'mada_l0ve1' 2dc 39c m_szINIVersionString: 'MSG1.0' 2dc 39c m_iIsPost: 1 2dc 39c ReadIniFileInt 2dc 39c section: [Info] key: 'W' default: 0 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 722032 2dc 39c m_hWnd: 0xb0470 2dc 39c ReadIniFileInt 2dc 39c section: [Info] key: 'M' default: 0 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 3 2dc 39c m_nMsgNumber: 3 2dc 39c exit HTTPRedirectHandler::CheckRedirectFile 2dc 39c HTTPRedirectHandler::HandleRedirectSingleFile 2dc 39c ReadIniFileString 2dc 39c section: [Info] key: 'Name' default: '' 2dc 39c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471783140collage10.jpg 2dc 39c returning 'C:\Documents and Settings\ianis\Desktop\collage10.jpg' 2dc 39c set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 39c m_bProcessed: 1 [success] 2dc 39c exit HTTPRedirectHandler::Process 2dc 39c GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage10.jpg. 2dc 39c szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage10.jpg. 2dc 39c HTTPRedirectHandler::~HTTPRedirectHandler 2dc 39c m_cFileName: C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 39c m_hWndReporting: 0xb0470 2dc 39c m_nMsgNumber: 3 2dc 39c RedirectType: 1 RedirectTypeSingleFile 2dc 39c bIsPost: 1 2dc 39c PostInfoToApp YSERVER_IPC_BEGIN 0 0

2dc 39c SendMessage 0xb0470 2dc 39c IPCInfo: 2dc 39c cFileName: 'C:\Documents and Settings\ianis\Desktop\collage10.jpg' 2dc 39c cUserID: 'mada_l0ve1' 2dc 39c nStatus: 0 2dc 39c nType: YSERVER_IPC_BEGIN 2dc 39c lFileLen: 0 2dc 39c lCurrBytes: 0 2dc 39c nMessageNumber: 3 2dc 39c SendMessage processed 2dc 39c calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 39c ReceiveFile 2dc 39c iContentLength: 317224 2dc 39c ReceiveEntityBody 2dc 39c temp: C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 39c dwBufSize: 16384 2dc 39c dwNumBufBytesUsed: 771 2dc 39c creating file C:\Documents and Settings\ianis\Desktop\collage10.jpg 2dc 39c flushed 771 bytes 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 771 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 17155 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 33539 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 49923 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 66307 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 82691 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 99075 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 115459 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 131843 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 148227 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 164611 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 180995 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 197379 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 213763 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 230147 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 246531 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 262915 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 279299 0 2dc 39c ReadEntityBodyChunk 16384 2dc 39c PostInfoToApp YSERVER_IPC_RECEIVING 295683 0 2dc 39c ReadEntityBodyChunk 16384

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c 39c

PostInfoToApp YSERVER_IPC_RECEIVING 312067 0 ReadEntityBodyChunk 5157 PostInfoToApp YSERVER_IPC_RECEIVING 317224 0 closing file C:\Documents and Settings\ianis\Desktop\collage10.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage10.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 3 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 39c 200 2dc 39c OK 2dc 39c sent: 2dc 39c <<<< 2dc 39c HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 39c >>>> 2dc 39c leaving HandleFileReceive 2dc 39c HTTPRequestHandler::~HTTPRequestHandler 2dc 39c calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 39c after calling RemoveHTTPRQH, count = 0. 2dc 39c closesocket: 0x19c 2dc 39c HTTPLog::~HTTPLog 2dc 39c leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage11.jpg 2dc 384 szAppID: Messenger

2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 4 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage11.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471785171collage11.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnoyx58y8vv44ifoaay 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage11.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage11.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=EF459407EE99FB5FAFBDF63728E30FEA 2dc 384 2dc 384 2dc 384 W=722032 M=4

wrote Timestamp=EF459407EE99FB5FAFBDF63728E30FEA writing to ini file:

2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=4 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471785171collage11.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnoyx58y8vv44ifoaay 2dc 384 szKey: lc9luhmtnoyx58y8vv44ifoaay 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1490 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x190 2dc 4b8 HandlerThread 0x198 2dc 4b8 HTTPLog::HTTPLog 2dc 4b8 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 4b8 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 4b8 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 4b8 about to m_HTTPLog.SetSocket(m_sock) 2dc 4b8 HTTPLog::SetSocket starting... socket=408 2dc 4b8 HTTPLog::SetSocket exiting 2dc 4b8 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 4b8 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 4b8 about to create Kill Comm Event 2dc 4b8 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 4b8 HTTPRequestHandler::ReadRequest 2dc 4b8 HTTPRequestHandler::ReadRequest 2dc 4b8 received 1024 bytes 2dc 4b8 Found '\r\n\r\n' 2dc 4b8 allocating entity body buffer to store read overflow from header 2dc 4b8 758 bytes 2dc 4b8 0 ms elapsed 2dc 4b8 header is: 2dc 4b8 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 4b8 POST /Messenger.mada_l0ve1.1190471785171collage11.jpg?AppID=Messenger&UserID=mada_l0ve1

&K=lc9luhmtnoyx58y8vv44ifoaay HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 395811 Cache-Control: no-cache 2dc 4b8 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 4b8 m_pEntityBodyBuffer: 0x364600 2dc 4b8 m_dwEntityBodyBufferSize: 16384 2dc 4b8 m_dwNumBytesInEntityBody: 758 2dc 4b8 HTTPRequestHandler::ParseRequest 2dc 4b8 m_cRequest: POST 2dc 4b8 UnescapeName 2dc 4b8 DecodeURL 2dc 4b8 before: Messenger 2dc 4b8 before: Messenger 2dc 4b8 after: Messenger 2dc 4b8 UnescapeName 2dc 4b8 DecodeURL 2dc 4b8 before: mada_l0ve1 2dc 4b8 before: mada_l0ve1 2dc 4b8 after: mada_l0ve1 2dc 4b8 UnescapeName 2dc 4b8 DecodeURL 2dc 4b8 before: lc9luhmtnoyx58y8vv44ifoaay 2dc 4b8 before: lc9luhmtnoyx58y8vv44ifoaay 2dc 4b8 after: lc9luhmtnoyx58y8vv44ifoaay 2dc 4b8 extracted the filename from the URL. saving to m_cFileName: 2dc 4b8 '/Messenger.mada_l0ve1.1190471785171collage11.jpg' 2dc 4b8 m_cFileName: /Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 ProcessYahooRequestParams 2dc 4b8 DecodeURL 2dc 4b8 before: Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 ValidateRequest 2dc 4b8 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'App' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'Messenger' 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'User' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'mada_l0ve1' 2dc 4b8 ReadIniFileInt 2dc 4b8 section: [Info] key: 'Post' default: 0 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 1 2dc 4b8 ValidateRequest: true 2dc 4b8 request is a Yahoo request 2dc 4b8 leaving ParseRequest 2dc 4b8 HandleFileReceive 2dc 4b8 file name: /Messenger.mada_l0ve1.1190471785171collage11.jpg

2dc 4b8 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 4b8 UnescapeName 2dc 4b8 DecodeURL 2dc 4b8 before: /Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 before: /Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 after: /Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 unescaped file name: /Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 HTTPRequestHandler::ReceiveRedirectedFile 2dc 4b8 HTTPRedirectHandler::HTTPRedirectHandler 2dc 4b8 GetBaseURL 2dc 4b8 bAddrContainsPort: 0 2dc 4b8 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471785171collage11.jpg?AppID=Messen ger&UserID=mada_l0ve1&K=lc9luhmtnoyx58y8vv44ifoaay 2dc 4b8 HTTPRedirectHandler::Process 2dc 4b8 ValidateKeys 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'Timestamp' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'EF459407EE99FB5FAFBDF63728E30FEA' 2dc 4b8 szTimeStamp: 'EF459407EE99FB5FAFBDF63728E30FEA' 2dc 4b8 CSecretKey::CSecretKey 2dc 4b8 szApp: Messenger 2dc 4b8 szUser: mada_l0ve1 2dc 4b8 szTimeStamp: EF459407EE99FB5FAFBDF63728E30FEA 2dc 4b8 CSecretKey::Init(). 2dc 4b8 m_szAppID: Messenger 2dc 4b8 m_szUserID: mada_l0ve1 2dc 4b8 KeyMatches 'lc9luhmtnoyx58y8vv44ifoaay' 2dc 4b8 key comparison test passed... continuing 2dc 4b8 HTTPRedirectHandler::CheckRedirectFile 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 ReadIniFileInt 2dc 4b8 section: [Info] key: 'Dir' default: 0 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 0 2dc 4b8 set m_RType to RedirectTypeSingleFile 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'App' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'Messenger' 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'User' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'mada_l0ve1' 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'Version' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'MSG1.0'

2dc 4b8 ReadIniFileInt 2dc 4b8 section: [Info] key: 'Post' default: 0 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 1 2dc 4b8 m_szINIApp: 'Messenger' 2dc 4b8 m_szINIUser: 'mada_l0ve1' 2dc 4b8 m_szINIVersionString: 'MSG1.0' 2dc 4b8 m_iIsPost: 1 2dc 4b8 ReadIniFileInt 2dc 4b8 section: [Info] key: 'W' default: 0 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 722032 2dc 4b8 m_hWnd: 0xb0470 2dc 4b8 ReadIniFileInt 2dc 4b8 section: [Info] key: 'M' default: 0 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 4 2dc 4b8 m_nMsgNumber: 4 2dc 4b8 exit HTTPRedirectHandler::CheckRedirectFile 2dc 4b8 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 4b8 ReadIniFileString 2dc 4b8 section: [Info] key: 'Name' default: '' 2dc 4b8 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471785171collage11.jpg 2dc 4b8 returning 'C:\Documents and Settings\ianis\Desktop\collage11.jpg' 2dc 4b8 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage11.jpg 2dc 4b8 m_bProcessed: 1 [success] 2dc 4b8 exit HTTPRedirectHandler::Process 2dc 4b8 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage11.jpg. 2dc 4b8 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage11.jpg. 2dc 4b8 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 4b8 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage11.jpg 2dc 4b8 m_hWndReporting: 0xb0470 2dc 4b8 m_nMsgNumber: 4 2dc 4b8 RedirectType: 1 RedirectTypeSingleFile 2dc 4b8 bIsPost: 1 2dc 4b8 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 4b8 SendMessage 0xb0470 2dc 4b8 IPCInfo: 2dc 4b8 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage11.jpg' 2dc 4b8 cUserID: 'mada_l0ve1' 2dc 4b8 nStatus: 0 2dc 4b8 nType: YSERVER_IPC_BEGIN 2dc 4b8 lFileLen: 0 2dc 4b8 lCurrBytes: 0 2dc 4b8 nMessageNumber: 4 2dc 4b8 SendMessage processed 2dc 4b8 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage11.jpg 2dc 4b8 ReceiveFile 2dc 4b8 iContentLength: 395811 2dc 4b8 ReceiveEntityBody

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 2b0 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8

temp: C:\Documents and Settings\ianis\Desktop\collage11.jpg dwBufSize: 16384 dwNumBufBytesUsed: 758 creating file C:\Documents and Settings\ianis\Desktop\collage11.jpg flushed 758 bytes PostInfoToApp YSERVER_IPC_RECEIVING 758 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 17142 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 33526 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 49910 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 66294 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 82678 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 99062 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115446 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131830 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148214 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164598 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180982 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197366 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 213750 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 230134 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 246518 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 262902 0 IsFreeEntryInThreadArray ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 279286 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 295670 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 312054 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 328438 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 344822 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 361206 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 377590 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 393974 0 ReadEntityBodyChunk 1837 PostInfoToApp YSERVER_IPC_RECEIVING 395811 0 closing file C:\Documents and Settings\ianis\Desktop\collage11.jpg

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8 4b8

PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage11.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 4 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 4b8 200 2dc 4b8 OK 2dc 4b8 sent: 2dc 4b8 <<<< 2dc 4b8 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 4b8 >>>> 2dc 4b8 leaving HandleFileReceive 2dc 4b8 HTTPRequestHandler::~HTTPRequestHandler 2dc 4b8 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 4b8 after calling RemoveHTTPRQH, count = 0. 2dc 4b8 closesocket: 0x198 2dc 4b8 HTTPLog::~HTTPLog 2dc 4b8 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 5

2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage12.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471786812collage12.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnksm50dc1u 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage12.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage12.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=D87B5407C27AB04CFB70036A37559718 2dc 384 2dc 384 2dc 384

wrote Timestamp=D87B5407C27AB04CFB70036A37559718 writing to ini file:

W=722032 M=5 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=5 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471786812collage12.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnksm50dc1u 2dc 384 szKey: lc9luhmtnksm50dc1u 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1491 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x194 2dc 4f0 HandlerThread 0x188 2dc 4f0 HTTPLog::HTTPLog 2dc 4f0 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 4f0 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 4f0 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 4f0 about to m_HTTPLog.SetSocket(m_sock) 2dc 4f0 HTTPLog::SetSocket starting... socket=392 2dc 4f0 HTTPLog::SetSocket exiting 2dc 4f0 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 4f0 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 4f0 about to create Kill Comm Event 2dc 4f0 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 4f0 HTTPRequestHandler::ReadRequest 2dc 4f0 HTTPRequestHandler::ReadRequest 2dc 4f0 received 258 bytes 2dc 4f0 Found '\r\n\r\n' 2dc 4f0 0 ms elapsed 2dc 4f0 header is: 2dc 4f0 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 4f0 POST /Messenger.mada_l0ve1.1190471786812collage12.jpg?AppID=Messenger&UserID=mada_l0ve1 &K=lc9luhmtnksm50dc1u HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 270690 Cache-Control: no-cache

2dc 4f0 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 4f0 m_pEntityBodyBuffer: 0x0 2dc 4f0 m_dwEntityBodyBufferSize: 0 2dc 4f0 m_dwNumBytesInEntityBody: 0 2dc 4f0 HTTPRequestHandler::ParseRequest 2dc 4f0 m_cRequest: POST 2dc 4f0 UnescapeName 2dc 4f0 DecodeURL 2dc 4f0 before: Messenger 2dc 4f0 before: Messenger 2dc 4f0 after: Messenger 2dc 4f0 UnescapeName 2dc 4f0 DecodeURL 2dc 4f0 before: mada_l0ve1 2dc 4f0 before: mada_l0ve1 2dc 4f0 after: mada_l0ve1 2dc 4f0 UnescapeName 2dc 4f0 DecodeURL 2dc 4f0 before: lc9luhmtnksm50dc1u 2dc 4f0 before: lc9luhmtnksm50dc1u 2dc 4f0 after: lc9luhmtnksm50dc1u 2dc 4f0 extracted the filename from the URL. saving to m_cFileName: 2dc 4f0 '/Messenger.mada_l0ve1.1190471786812collage12.jpg' 2dc 4f0 m_cFileName: /Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 ProcessYahooRequestParams 2dc 4f0 DecodeURL 2dc 4f0 before: Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 ValidateRequest 2dc 4f0 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'App' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'Messenger' 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'User' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'mada_l0ve1' 2dc 4f0 ReadIniFileInt 2dc 4f0 section: [Info] key: 'Post' default: 0 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 1 2dc 4f0 ValidateRequest: true 2dc 4f0 request is a Yahoo request 2dc 4f0 leaving ParseRequest 2dc 4f0 HandleFileReceive 2dc 4f0 file name: /Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 4f0 UnescapeName 2dc 4f0 DecodeURL 2dc 4f0 before: /Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 before: /Messenger.mada_l0ve1.1190471786812collage12.jpg

2dc 4f0 after: /Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 unescaped file name: /Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 HTTPRequestHandler::ReceiveRedirectedFile 2dc 4f0 HTTPRedirectHandler::HTTPRedirectHandler 2dc 4f0 GetBaseURL 2dc 4f0 bAddrContainsPort: 0 2dc 4f0 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471786812collage12.jpg?AppID=Messen ger&UserID=mada_l0ve1&K=lc9luhmtnksm50dc1u 2dc 4f0 HTTPRedirectHandler::Process 2dc 4f0 ValidateKeys 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'Timestamp' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'D87B5407C27AB04CFB70036A37559718' 2dc 4f0 szTimeStamp: 'D87B5407C27AB04CFB70036A37559718' 2dc 4f0 CSecretKey::CSecretKey 2dc 4f0 szApp: Messenger 2dc 4f0 szUser: mada_l0ve1 2dc 4f0 szTimeStamp: D87B5407C27AB04CFB70036A37559718 2dc 4f0 CSecretKey::Init(). 2dc 4f0 m_szAppID: Messenger 2dc 4f0 m_szUserID: mada_l0ve1 2dc 4f0 KeyMatches 'lc9luhmtnksm50dc1u' 2dc 4f0 key comparison test passed... continuing 2dc 4f0 HTTPRedirectHandler::CheckRedirectFile 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 ReadIniFileInt 2dc 4f0 section: [Info] key: 'Dir' default: 0 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 0 2dc 4f0 set m_RType to RedirectTypeSingleFile 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'App' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'Messenger' 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'User' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'mada_l0ve1' 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'Version' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'MSG1.0' 2dc 4f0 ReadIniFileInt 2dc 4f0 section: [Info] key: 'Post' default: 0 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 1 2dc 4f0 m_szINIApp: 'Messenger'

2dc 4f0 m_szINIUser: 'mada_l0ve1' 2dc 4f0 m_szINIVersionString: 'MSG1.0' 2dc 4f0 m_iIsPost: 1 2dc 4f0 ReadIniFileInt 2dc 4f0 section: [Info] key: 'W' default: 0 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 722032 2dc 4f0 m_hWnd: 0xb0470 2dc 4f0 ReadIniFileInt 2dc 4f0 section: [Info] key: 'M' default: 0 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 5 2dc 4f0 m_nMsgNumber: 5 2dc 4f0 exit HTTPRedirectHandler::CheckRedirectFile 2dc 4f0 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 4f0 ReadIniFileString 2dc 4f0 section: [Info] key: 'Name' default: '' 2dc 4f0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471786812collage12.jpg 2dc 4f0 returning 'C:\Documents and Settings\ianis\Desktop\collage12.jpg' 2dc 4f0 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 4f0 m_bProcessed: 1 [success] 2dc 4f0 exit HTTPRedirectHandler::Process 2dc 4f0 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage12.jpg. 2dc 4f0 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage12.jpg. 2dc 4f0 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 4f0 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 4f0 m_hWndReporting: 0xb0470 2dc 4f0 m_nMsgNumber: 5 2dc 4f0 RedirectType: 1 RedirectTypeSingleFile 2dc 4f0 bIsPost: 1 2dc 4f0 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 4f0 SendMessage 0xb0470 2dc 4f0 IPCInfo: 2dc 4f0 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage12.jpg' 2dc 4f0 cUserID: 'mada_l0ve1' 2dc 4f0 nStatus: 0 2dc 4f0 nType: YSERVER_IPC_BEGIN 2dc 4f0 lFileLen: 0 2dc 4f0 lCurrBytes: 0 2dc 4f0 nMessageNumber: 5 2dc 4f0 SendMessage processed 2dc 4f0 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 4f0 ReceiveFile 2dc 4f0 iContentLength: 270690 2dc 4f0 ReceiveEntityBody 2dc 4f0 temp: C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 4f0 dwBufSize: 16384 2dc 4f0 dwNumBufBytesUsed: 0 2dc 4f0 creating file C:\Documents and Settings\ianis\Desktop\collage12.jpg 2dc 4f0 ReadEntityBodyChunk 16384 2dc 4f0 PostInfoToApp YSERVER_IPC_RECEIVING 16384 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 2b0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0 4f0

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 32768 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 49152 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 65536 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 81920 0 IsFreeEntryInThreadArray ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 98304 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 114688 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131072 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 147456 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 163840 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180224 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 196608 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 212992 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 229376 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 245760 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 262144 0 ReadEntityBodyChunk 8546 PostInfoToApp YSERVER_IPC_RECEIVING 270690 0 closing file C:\Documents and Settings\ianis\Desktop\collage12.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage12.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 5 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 4f0 200

2dc 2dc 2dc 2dc

4f0 OK 4f0 sent: 4f0 <<<< 4f0

HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 4f0 >>>> 2dc 4f0 leaving HandleFileReceive 2dc 4f0 HTTPRequestHandler::~HTTPRequestHandler 2dc 4f0 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 4f0 after calling RemoveHTTPRQH, count = 0. 2dc 4f0 closesocket: 0x188 2dc 4f0 HTTPLog::~HTTPLog 2dc 4f0 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 6 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage13.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471790515collage13.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnco2f64dw0c4ctwvp8

2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage13.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage13.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=4482F2AAF3D06E59723DF08140A645F3 2dc 384 2dc 384 2dc 384

wrote Timestamp=4482F2AAF3D06E59723DF08140A645F3 writing to ini file:

W=722032 M=6 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=6 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471790515collage13.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnco2f64dw0c4ctwvp8 2dc 384 szKey: lc9luhmtnco2f64dw0c4ctwvp8 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1492 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 2b0 2b0 2b0 2b0 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4

port: 80 spawning new Handler thread ReportInitProgress AddHandlerThreadToThreadArray CloseHandle thread 0x184 HandlerThread 0x1a0 HTTPLog::HTTPLog HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=416 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 266 bytes Found '\r\n\r\n' 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190471790515collage13.jpg?AppID=Messenger&UserID=mada_l0ve1 &K=lc9luhmtnco2f64dw0c4ctwvp8 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 185293 Cache-Control: no-cache 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x0 m_dwEntityBodyBufferSize: 0 m_dwNumBytesInEntityBody: 0 HTTPRequestHandler::ParseRequest m_cRequest: POST UnescapeName DecodeURL before: Messenger before: Messenger after: Messenger UnescapeName DecodeURL before: mada_l0ve1 before: mada_l0ve1 after: mada_l0ve1 UnescapeName DecodeURL before: lc9luhmtnco2f64dw0c4ctwvp8 before: lc9luhmtnco2f64dw0c4ctwvp8 after: lc9luhmtnco2f64dw0c4ctwvp8 extracted the filename from the URL. saving to m_cFileName:

2dc 3b4 '/Messenger.mada_l0ve1.1190471790515collage13.jpg' 2dc 3b4 m_cFileName: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 ProcessYahooRequestParams 2dc 3b4 DecodeURL 2dc 3b4 before: Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 ValidateRequest 2dc 3b4 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'App' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'Messenger' 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'User' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'mada_l0ve1' 2dc 3b4 ReadIniFileInt 2dc 3b4 section: [Info] key: 'Post' default: 0 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 1 2dc 3b4 ValidateRequest: true 2dc 3b4 request is a Yahoo request 2dc 3b4 leaving ParseRequest 2dc 3b4 HandleFileReceive 2dc 3b4 file name: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 3b4 UnescapeName 2dc 3b4 DecodeURL 2dc 3b4 before: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 before: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 after: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 unescaped file name: /Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 HTTPRequestHandler::ReceiveRedirectedFile 2dc 3b4 HTTPRedirectHandler::HTTPRedirectHandler 2dc 3b4 GetBaseURL 2dc 3b4 bAddrContainsPort: 0 2dc 3b4 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471790515collage13.jpg?AppID=Messen ger&UserID=mada_l0ve1&K=lc9luhmtnco2f64dw0c4ctwvp8 2dc 3b4 HTTPRedirectHandler::Process 2dc 3b4 ValidateKeys 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'Timestamp' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning '4482F2AAF3D06E59723DF08140A645F3' 2dc 3b4 szTimeStamp: '4482F2AAF3D06E59723DF08140A645F3' 2dc 3b4 CSecretKey::CSecretKey 2dc 3b4 szApp: Messenger 2dc 3b4 szUser: mada_l0ve1 2dc 3b4 szTimeStamp: 4482F2AAF3D06E59723DF08140A645F3 2dc 3b4 CSecretKey::Init().

2dc 3b4 m_szAppID: Messenger 2dc 3b4 m_szUserID: mada_l0ve1 2dc 3b4 KeyMatches 'lc9luhmtnco2f64dw0c4ctwvp8' 2dc 3b4 key comparison test passed... continuing 2dc 3b4 HTTPRedirectHandler::CheckRedirectFile 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 ReadIniFileInt 2dc 3b4 section: [Info] key: 'Dir' default: 0 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 0 2dc 3b4 set m_RType to RedirectTypeSingleFile 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'App' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'Messenger' 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'User' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'mada_l0ve1' 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'Version' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'MSG1.0' 2dc 3b4 ReadIniFileInt 2dc 3b4 section: [Info] key: 'Post' default: 0 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 1 2dc 3b4 m_szINIApp: 'Messenger' 2dc 3b4 m_szINIUser: 'mada_l0ve1' 2dc 3b4 m_szINIVersionString: 'MSG1.0' 2dc 3b4 m_iIsPost: 1 2dc 3b4 ReadIniFileInt 2dc 3b4 section: [Info] key: 'W' default: 0 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 722032 2dc 3b4 m_hWnd: 0xb0470 2dc 3b4 ReadIniFileInt 2dc 3b4 section: [Info] key: 'M' default: 0 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 6 2dc 3b4 m_nMsgNumber: 6 2dc 3b4 exit HTTPRedirectHandler::CheckRedirectFile 2dc 3b4 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 3b4 ReadIniFileString 2dc 3b4 section: [Info] key: 'Name' default: '' 2dc 3b4 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471790515collage13.jpg 2dc 3b4 returning 'C:\Documents and Settings\ianis\Desktop\collage13.jpg' 2dc 3b4 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage13.jpg

2dc 3b4 m_bProcessed: 1 [success] 2dc 3b4 exit HTTPRedirectHandler::Process 2dc 3b4 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage13.jpg. 2dc 3b4 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage13.jpg. 2dc 3b4 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 3b4 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 3b4 m_hWndReporting: 0xb0470 2dc 3b4 m_nMsgNumber: 6 2dc 3b4 RedirectType: 1 RedirectTypeSingleFile 2dc 3b4 bIsPost: 1 2dc 3b4 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 3b4 SendMessage 0xb0470 2dc 3b4 IPCInfo: 2dc 3b4 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage13.jpg' 2dc 3b4 cUserID: 'mada_l0ve1' 2dc 3b4 nStatus: 0 2dc 3b4 nType: YSERVER_IPC_BEGIN 2dc 3b4 lFileLen: 0 2dc 3b4 lCurrBytes: 0 2dc 3b4 nMessageNumber: 6 2dc 3b4 SendMessage processed 2dc 3b4 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 3b4 ReceiveFile 2dc 3b4 iContentLength: 185293 2dc 3b4 ReceiveEntityBody 2dc 3b4 temp: C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 3b4 dwBufSize: 16384 2dc 3b4 dwNumBufBytesUsed: 0 2dc 3b4 creating file C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 16384 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 32768 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 49152 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 65536 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 81920 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 98304 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 114688 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 131072 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 147456 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 163840 0 2dc 3b4 ReadEntityBodyChunk 16384 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 180224 0 2dc 3b4 ReadEntityBodyChunk 5069 2dc 3b4 PostInfoToApp YSERVER_IPC_RECEIVING 185293 0 2dc 3b4 closing file C:\Documents and Settings\ianis\Desktop\collage13.jpg 2dc 3b4 PostInfoToApp YSERVER_IPC_FINISHED 0 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4 3b4

SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage13.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 6 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 3b4 200 2dc 3b4 OK 2dc 3b4 sent: 2dc 3b4 <<<< 2dc 3b4 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 3b4 >>>> 2dc 3b4 leaving HandleFileReceive 2dc 3b4 HTTPRequestHandler::~HTTPRequestHandler 2dc 3b4 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 3b4 after calling RemoveHTTPRQH, count = 0. 2dc 3b4 closesocket: 0x1a0 2dc 3b4 HTTPLog::~HTTPLog 2dc 3b4 leaving HandlerThread 2dc 2b0 IsFreeEntryInThreadArray 2dc 2b0 CloseHandle thread 0x18c 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage14.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032

2dc 384 nMsgNumber: 7 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage14.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471791562collage14.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtn823v2morgpd6p0u65 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage14.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage14.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=BFEC1FC509397FDE0CEA66CE684C1B96 2dc 384 2dc 384 2dc 384

wrote Timestamp=BFEC1FC509397FDE0CEA66CE684C1B96 writing to ini file:

W=722032 M=7 2dc 384 2dc 384 2dc 384

wrote W=722032 wrote M=7 writing to ini file:

2dc 384 Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471791562collage14.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtn823v2morgpd6p0u65 2dc 384 szKey: lc9luhmtn823v2morgpd6p0u65 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1493 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 IsFreeEntryInThreadArray 2dc 374 HandlerThread 0x18c 2dc 374 HTTPLog::HTTPLog 2dc 374 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 374 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 374 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 374 about to m_HTTPLog.SetSocket(m_sock) 2dc 374 HTTPLog::SetSocket starting... socket=396 2dc 374 HTTPLog::SetSocket exiting 2dc 374 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 374 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 374 about to create Kill Comm Event 2dc 374 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 374 HTTPRequestHandler::ReadRequest 2dc 374 HTTPRequestHandler::ReadRequest 2dc 374 received 1024 bytes 2dc 374 Found '\r\n\r\n' 2dc 374 allocating entity body buffer to store read overflow from header 2dc 374 758 bytes 2dc 374 0 ms elapsed 2dc 374 header is: 2dc 374 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 374 POST /Messenger.mada_l0ve1.1190471791562collage14.jpg?AppID=Messenger&UserID=mada_l0ve1 &K=lc9luhmtn823v2morgpd6p0u65 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5)

Host: 192.168.1.206 Content-Length: 246375 Cache-Control: no-cache 2dc 374 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 374 m_pEntityBodyBuffer: 0x364600 2dc 374 m_dwEntityBodyBufferSize: 16384 2dc 374 m_dwNumBytesInEntityBody: 758 2dc 374 HTTPRequestHandler::ParseRequest 2dc 374 m_cRequest: POST 2dc 374 UnescapeName 2dc 374 DecodeURL 2dc 374 before: Messenger 2dc 374 before: Messenger 2dc 374 after: Messenger 2dc 374 UnescapeName 2dc 374 DecodeURL 2dc 374 before: mada_l0ve1 2dc 374 before: mada_l0ve1 2dc 374 after: mada_l0ve1 2dc 374 UnescapeName 2dc 374 DecodeURL 2dc 374 before: lc9luhmtn823v2morgpd6p0u65 2dc 374 before: lc9luhmtn823v2morgpd6p0u65 2dc 374 after: lc9luhmtn823v2morgpd6p0u65 2dc 374 extracted the filename from the URL. saving to m_cFileName: 2dc 374 '/Messenger.mada_l0ve1.1190471791562collage14.jpg' 2dc 374 m_cFileName: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 ProcessYahooRequestParams 2dc 374 DecodeURL 2dc 374 before: Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 ValidateRequest 2dc 374 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'App' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'Messenger' 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'User' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'mada_l0ve1' 2dc 374 ReadIniFileInt 2dc 374 section: [Info] key: 'Post' default: 0 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 1 2dc 374 ValidateRequest: true 2dc 374 request is a Yahoo request 2dc 374 leaving ParseRequest 2dc 374 HandleFileReceive 2dc 374 file name: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 374 UnescapeName

2dc 374 DecodeURL 2dc 374 before: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 before: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 after: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 unescaped file name: /Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 HTTPRequestHandler::ReceiveRedirectedFile 2dc 374 HTTPRedirectHandler::HTTPRedirectHandler 2dc 374 GetBaseURL 2dc 374 bAddrContainsPort: 0 2dc 374 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471791562collage14.jpg?AppID=Messen ger&UserID=mada_l0ve1&K=lc9luhmtn823v2morgpd6p0u65 2dc 374 HTTPRedirectHandler::Process 2dc 374 ValidateKeys 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'Timestamp' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'BFEC1FC509397FDE0CEA66CE684C1B96' 2dc 374 szTimeStamp: 'BFEC1FC509397FDE0CEA66CE684C1B96' 2dc 374 CSecretKey::CSecretKey 2dc 374 szApp: Messenger 2dc 374 szUser: mada_l0ve1 2dc 374 szTimeStamp: BFEC1FC509397FDE0CEA66CE684C1B96 2dc 374 CSecretKey::Init(). 2dc 374 m_szAppID: Messenger 2dc 374 m_szUserID: mada_l0ve1 2dc 374 KeyMatches 'lc9luhmtn823v2morgpd6p0u65' 2dc 374 key comparison test passed... continuing 2dc 374 HTTPRedirectHandler::CheckRedirectFile 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 ReadIniFileInt 2dc 374 section: [Info] key: 'Dir' default: 0 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 0 2dc 374 set m_RType to RedirectTypeSingleFile 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'App' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'Messenger' 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'User' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'mada_l0ve1' 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'Version' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'MSG1.0' 2dc 374 ReadIniFileInt 2dc 374 section: [Info] key: 'Post' default: 0 2dc 374 file:

C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 1 2dc 374 m_szINIApp: 'Messenger' 2dc 374 m_szINIUser: 'mada_l0ve1' 2dc 374 m_szINIVersionString: 'MSG1.0' 2dc 374 m_iIsPost: 1 2dc 374 ReadIniFileInt 2dc 374 section: [Info] key: 'W' default: 0 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 722032 2dc 374 m_hWnd: 0xb0470 2dc 374 ReadIniFileInt 2dc 374 section: [Info] key: 'M' default: 0 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 7 2dc 374 m_nMsgNumber: 7 2dc 374 exit HTTPRedirectHandler::CheckRedirectFile 2dc 374 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 374 ReadIniFileString 2dc 374 section: [Info] key: 'Name' default: '' 2dc 374 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471791562collage14.jpg 2dc 374 returning 'C:\Documents and Settings\ianis\Desktop\collage14.jpg' 2dc 374 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage14.jpg 2dc 374 m_bProcessed: 1 [success] 2dc 374 exit HTTPRedirectHandler::Process 2dc 374 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage14.jpg. 2dc 374 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage14.jpg. 2dc 374 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 374 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage14.jpg 2dc 374 m_hWndReporting: 0xb0470 2dc 374 m_nMsgNumber: 7 2dc 374 RedirectType: 1 RedirectTypeSingleFile 2dc 374 bIsPost: 1 2dc 374 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 374 SendMessage 0xb0470 2dc 374 IPCInfo: 2dc 374 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage14.jpg' 2dc 374 cUserID: 'mada_l0ve1' 2dc 374 nStatus: 0 2dc 374 nType: YSERVER_IPC_BEGIN 2dc 374 lFileLen: 0 2dc 374 lCurrBytes: 0 2dc 374 nMessageNumber: 7 2dc 374 SendMessage processed 2dc 374 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage14.jpg 2dc 374 ReceiveFile 2dc 374 iContentLength: 246375 2dc 374 ReceiveEntityBody 2dc 374 temp: C:\Documents and Settings\ianis\Desktop\collage14.jpg 2dc 374 dwBufSize: 16384 2dc 374 dwNumBufBytesUsed: 758

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374 374

creating file C:\Documents and Settings\ianis\Desktop\collage14.jpg flushed 758 bytes PostInfoToApp YSERVER_IPC_RECEIVING 758 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 17142 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 33526 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 49910 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 66294 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 82678 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 99062 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115446 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131830 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148214 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164598 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180982 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197366 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 213750 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 230134 0 ReadEntityBodyChunk 16241 PostInfoToApp YSERVER_IPC_RECEIVING 246375 0 closing file C:\Documents and Settings\ianis\Desktop\collage14.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage14.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 7 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 374 200

2dc 2dc 2dc 2dc

374 OK 374 sent: 374 <<<< 374

HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 374 >>>> 2dc 374 leaving HandleFileReceive 2dc 374 HTTPRequestHandler::~HTTPRequestHandler 2dc 374 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 374 after calling RemoveHTTPRQH, count = 0. 2dc 374 closesocket: 0x18c 2dc 374 HTTPLog::~HTTPLog 2dc 374 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 8 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage2.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471793937collage2.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnc7dxoxjntzdhg7a9t

2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage2.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage2.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=436AB03372069F0071DE75D0D76789EF 2dc 384 2dc 384 2dc 384

wrote Timestamp=436AB03372069F0071DE75D0D76789EF writing to ini file:

W=722032 M=8 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=8 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471793937collage2.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnc7dxoxjntzdhg7a9t 2dc 384 szKey: lc9luhmtnc7dxoxjntzdhg7a9t 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1498 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 2b0 2b0 2b0 2b0 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558

port: 80 spawning new Handler thread ReportInitProgress AddHandlerThreadToThreadArray CloseHandle thread 0x184 HandlerThread 0x198 HTTPLog::HTTPLog HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=408 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 1024 bytes Found '\r\n\r\n' allocating entity body buffer to store read overflow from header 760 bytes 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190471793937collage2.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtnc7dxoxjntzdhg7a9t HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 47159 Cache-Control: no-cache 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558 558

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x364600 m_dwEntityBodyBufferSize: 16384 m_dwNumBytesInEntityBody: 760 HTTPRequestHandler::ParseRequest m_cRequest: POST UnescapeName DecodeURL before: Messenger before: Messenger after: Messenger UnescapeName DecodeURL before: mada_l0ve1 before: mada_l0ve1 after: mada_l0ve1 UnescapeName DecodeURL before: lc9luhmtnc7dxoxjntzdhg7a9t before: lc9luhmtnc7dxoxjntzdhg7a9t

2dc 558 after: lc9luhmtnc7dxoxjntzdhg7a9t 2dc 558 extracted the filename from the URL. saving to m_cFileName: 2dc 558 '/Messenger.mada_l0ve1.1190471793937collage2.jpg' 2dc 558 m_cFileName: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 ProcessYahooRequestParams 2dc 558 DecodeURL 2dc 558 before: Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 ValidateRequest 2dc 558 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'App' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'Messenger' 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'User' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'mada_l0ve1' 2dc 558 ReadIniFileInt 2dc 558 section: [Info] key: 'Post' default: 0 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 1 2dc 558 ValidateRequest: true 2dc 558 request is a Yahoo request 2dc 558 leaving ParseRequest 2dc 558 HandleFileReceive 2dc 558 file name: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 558 UnescapeName 2dc 558 DecodeURL 2dc 558 before: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 before: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 after: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 unescaped file name: /Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 HTTPRequestHandler::ReceiveRedirectedFile 2dc 558 HTTPRedirectHandler::HTTPRedirectHandler 2dc 558 GetBaseURL 2dc 558 bAddrContainsPort: 0 2dc 558 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471793937collage2.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnc7dxoxjntzdhg7a9t 2dc 558 HTTPRedirectHandler::Process 2dc 558 ValidateKeys 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'Timestamp' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning '436AB03372069F0071DE75D0D76789EF' 2dc 558 szTimeStamp: '436AB03372069F0071DE75D0D76789EF' 2dc 558 CSecretKey::CSecretKey 2dc 558 szApp: Messenger 2dc 558 szUser: mada_l0ve1

2dc 558 szTimeStamp: 436AB03372069F0071DE75D0D76789EF 2dc 558 CSecretKey::Init(). 2dc 558 m_szAppID: Messenger 2dc 558 m_szUserID: mada_l0ve1 2dc 558 KeyMatches 'lc9luhmtnc7dxoxjntzdhg7a9t' 2dc 558 key comparison test passed... continuing 2dc 558 HTTPRedirectHandler::CheckRedirectFile 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 ReadIniFileInt 2dc 558 section: [Info] key: 'Dir' default: 0 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 0 2dc 558 set m_RType to RedirectTypeSingleFile 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'App' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'Messenger' 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'User' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'mada_l0ve1' 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'Version' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'MSG1.0' 2dc 558 ReadIniFileInt 2dc 558 section: [Info] key: 'Post' default: 0 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 1 2dc 558 m_szINIApp: 'Messenger' 2dc 558 m_szINIUser: 'mada_l0ve1' 2dc 558 m_szINIVersionString: 'MSG1.0' 2dc 558 m_iIsPost: 1 2dc 558 ReadIniFileInt 2dc 558 section: [Info] key: 'W' default: 0 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 722032 2dc 558 m_hWnd: 0xb0470 2dc 558 ReadIniFileInt 2dc 558 section: [Info] key: 'M' default: 0 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 8 2dc 558 m_nMsgNumber: 8 2dc 558 exit HTTPRedirectHandler::CheckRedirectFile 2dc 558 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 558 ReadIniFileString 2dc 558 section: [Info] key: 'Name' default: '' 2dc 558 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471793937collage2.jpg 2dc 558 returning 'C:\Documents and Settings\ianis\Desktop\collage2.jpg'

2dc 558 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 m_bProcessed: 1 [success] 2dc 558 exit HTTPRedirectHandler::Process 2dc 558 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage2.jpg. 2dc 558 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage2.jpg. 2dc 558 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 558 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 m_hWndReporting: 0xb0470 2dc 558 m_nMsgNumber: 8 2dc 558 RedirectType: 1 RedirectTypeSingleFile 2dc 558 bIsPost: 1 2dc 558 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 558 SendMessage 0xb0470 2dc 558 IPCInfo: 2dc 558 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage2.jpg' 2dc 558 cUserID: 'mada_l0ve1' 2dc 558 nStatus: 0 2dc 558 nType: YSERVER_IPC_BEGIN 2dc 558 lFileLen: 0 2dc 558 lCurrBytes: 0 2dc 558 nMessageNumber: 8 2dc 558 SendMessage processed 2dc 558 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 ReceiveFile 2dc 558 iContentLength: 47159 2dc 558 ReceiveEntityBody 2dc 558 temp: C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 dwBufSize: 16384 2dc 558 dwNumBufBytesUsed: 760 2dc 558 creating file C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 flushed 760 bytes 2dc 558 PostInfoToApp YSERVER_IPC_RECEIVING 760 0 2dc 558 ReadEntityBodyChunk 16384 2dc 558 PostInfoToApp YSERVER_IPC_RECEIVING 17144 0 2dc 558 ReadEntityBodyChunk 16384 2dc 558 PostInfoToApp YSERVER_IPC_RECEIVING 33528 0 2dc 558 ReadEntityBodyChunk 13631 2dc 558 PostInfoToApp YSERVER_IPC_RECEIVING 47159 0 2dc 558 closing file C:\Documents and Settings\ianis\Desktop\collage2.jpg 2dc 558 PostInfoToApp YSERVER_IPC_FINISHED 0 0 2dc 558 SendMessage 0xb0470 2dc 558 IPCInfo: 2dc 558 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage2.jpg' 2dc 558 cUserID: 'mada_l0ve1' 2dc 558 nStatus: 0 2dc 558 nType: YSERVER_IPC_FINISHED 2dc 558 lFileLen: 0 2dc 558 lCurrBytes: 0 2dc 558 nMessageNumber: 8 2dc 558 SendMessage processed 2dc 558 exit HTTPRequestHandler::ReceiveRedirectedFile 2dc 558 SendString 2dc 558

the file was received 2dc 558 200 2dc 558 OK 2dc 558 sent: 2dc 558 <<<< 2dc 558 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 558 >>>> 2dc 558 leaving HandleFileReceive 2dc 558 HTTPRequestHandler::~HTTPRequestHandler 2dc 558 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 558 after calling RemoveHTTPRQH, count = 0. 2dc 558 closesocket: 0x198 2dc 558 HTTPLog::~HTTPLog 2dc 558 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 9 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage4.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger

2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471794656collage4.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtngrpsbw 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage4.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage4.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=57A98A90371E0F593CEC9E7D147E4E3F 2dc 384 2dc 384 2dc 384

wrote Timestamp=57A98A90371E0F593CEC9E7D147E4E3F writing to ini file:

W=722032 M=9 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=9 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471794656collage4.jpg?AppID=Messenge

r&UserID=mada_l0ve1&K=lc9luhmtngrpsbw 2dc 384 szKey: lc9luhmtngrpsbw 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 384 leaving PostFile 2dc 2b0 IsFreeEntryInThreadArray 2dc 2b0 CloseHandle thread 0x194 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1499 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 IsFreeEntryInThreadArray 2dc 6bc HandlerThread 0x194 2dc 6bc HTTPLog::HTTPLog 2dc 6bc HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 6bc home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 6bc m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 6bc about to m_HTTPLog.SetSocket(m_sock) 2dc 6bc HTTPLog::SetSocket starting... socket=404 2dc 6bc HTTPLog::SetSocket exiting 2dc 6bc about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 6bc after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 6bc about to create Kill Comm Event 2dc 6bc leaving HTTPRequestHandler::HTTPRequestHandler 2dc 6bc HTTPRequestHandler::ReadRequest 2dc 6bc HTTPRequestHandler::ReadRequest 2dc 6bc received 1024 bytes 2dc 6bc Found '\r\n\r\n' 2dc 6bc allocating entity body buffer to store read overflow from header 2dc 6bc 770 bytes 2dc 6bc 0 ms elapsed 2dc 6bc header is: 2dc 6bc <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 6bc POST /Messenger.mada_l0ve1.1190471794656collage4.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtngrpsbw HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 259209 Cache-Control: no-cache 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

6bc >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 6bc m_pEntityBodyBuffer: 0x364600 6bc m_dwEntityBodyBufferSize: 16384 6bc m_dwNumBytesInEntityBody: 770 6bc HTTPRequestHandler::ParseRequest 6bc m_cRequest: POST 6bc UnescapeName 6bc DecodeURL 6bc before: Messenger

2dc 6bc before: Messenger 2dc 6bc after: Messenger 2dc 6bc UnescapeName 2dc 6bc DecodeURL 2dc 6bc before: mada_l0ve1 2dc 6bc before: mada_l0ve1 2dc 6bc after: mada_l0ve1 2dc 6bc UnescapeName 2dc 6bc DecodeURL 2dc 6bc before: lc9luhmtngrpsbw 2dc 6bc before: lc9luhmtngrpsbw 2dc 6bc after: lc9luhmtngrpsbw 2dc 6bc extracted the filename from the URL. saving to m_cFileName: 2dc 6bc '/Messenger.mada_l0ve1.1190471794656collage4.jpg' 2dc 6bc m_cFileName: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc ProcessYahooRequestParams 2dc 6bc DecodeURL 2dc 6bc before: Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc ValidateRequest 2dc 6bc C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'App' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'Messenger' 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'User' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'mada_l0ve1' 2dc 6bc ReadIniFileInt 2dc 6bc section: [Info] key: 'Post' default: 0 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 1 2dc 6bc ValidateRequest: true 2dc 6bc request is a Yahoo request 2dc 6bc leaving ParseRequest 2dc 6bc HandleFileReceive 2dc 6bc file name: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 6bc UnescapeName 2dc 6bc DecodeURL 2dc 6bc before: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc before: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc after: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc unescaped file name: /Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc HTTPRequestHandler::ReceiveRedirectedFile 2dc 6bc HTTPRedirectHandler::HTTPRedirectHandler 2dc 6bc GetBaseURL 2dc 6bc bAddrContainsPort: 0 2dc 6bc set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471794656collage4.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtngrpsbw

2dc 6bc HTTPRedirectHandler::Process 2dc 6bc ValidateKeys 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'Timestamp' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning '57A98A90371E0F593CEC9E7D147E4E3F' 2dc 6bc szTimeStamp: '57A98A90371E0F593CEC9E7D147E4E3F' 2dc 6bc CSecretKey::CSecretKey 2dc 6bc szApp: Messenger 2dc 6bc szUser: mada_l0ve1 2dc 6bc szTimeStamp: 57A98A90371E0F593CEC9E7D147E4E3F 2dc 6bc CSecretKey::Init(). 2dc 6bc m_szAppID: Messenger 2dc 6bc m_szUserID: mada_l0ve1 2dc 6bc KeyMatches 'lc9luhmtngrpsbw' 2dc 6bc key comparison test passed... continuing 2dc 6bc HTTPRedirectHandler::CheckRedirectFile 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc ReadIniFileInt 2dc 6bc section: [Info] key: 'Dir' default: 0 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 0 2dc 6bc set m_RType to RedirectTypeSingleFile 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'App' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'Messenger' 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'User' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'mada_l0ve1' 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'Version' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'MSG1.0' 2dc 6bc ReadIniFileInt 2dc 6bc section: [Info] key: 'Post' default: 0 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 1 2dc 6bc m_szINIApp: 'Messenger' 2dc 6bc m_szINIUser: 'mada_l0ve1' 2dc 6bc m_szINIVersionString: 'MSG1.0' 2dc 6bc m_iIsPost: 1 2dc 6bc ReadIniFileInt 2dc 6bc section: [Info] key: 'W' default: 0 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 722032 2dc 6bc m_hWnd: 0xb0470 2dc 6bc ReadIniFileInt 2dc 6bc section: [Info] key: 'M' default: 0

2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 9 2dc 6bc m_nMsgNumber: 9 2dc 6bc exit HTTPRedirectHandler::CheckRedirectFile 2dc 6bc HTTPRedirectHandler::HandleRedirectSingleFile 2dc 6bc ReadIniFileString 2dc 6bc section: [Info] key: 'Name' default: '' 2dc 6bc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471794656collage4.jpg 2dc 6bc returning 'C:\Documents and Settings\ianis\Desktop\collage4.jpg' 2dc 6bc set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 6bc m_bProcessed: 1 [success] 2dc 6bc exit HTTPRedirectHandler::Process 2dc 6bc GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage4.jpg. 2dc 6bc szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage4.jpg. 2dc 6bc HTTPRedirectHandler::~HTTPRedirectHandler 2dc 6bc m_cFileName: C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 6bc m_hWndReporting: 0xb0470 2dc 6bc m_nMsgNumber: 9 2dc 6bc RedirectType: 1 RedirectTypeSingleFile 2dc 6bc bIsPost: 1 2dc 6bc PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 6bc SendMessage 0xb0470 2dc 6bc IPCInfo: 2dc 6bc cFileName: 'C:\Documents and Settings\ianis\Desktop\collage4.jpg' 2dc 6bc cUserID: 'mada_l0ve1' 2dc 6bc nStatus: 0 2dc 6bc nType: YSERVER_IPC_BEGIN 2dc 6bc lFileLen: 0 2dc 6bc lCurrBytes: 0 2dc 6bc nMessageNumber: 9 2dc 6bc SendMessage processed 2dc 6bc calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 6bc ReceiveFile 2dc 6bc iContentLength: 259209 2dc 6bc ReceiveEntityBody 2dc 6bc temp: C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 6bc dwBufSize: 16384 2dc 6bc dwNumBufBytesUsed: 770 2dc 6bc creating file C:\Documents and Settings\ianis\Desktop\collage4.jpg 2dc 6bc flushed 770 bytes 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 770 0 2dc 6bc ReadEntityBodyChunk 16384 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 17154 0 2dc 6bc ReadEntityBodyChunk 16384 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 33538 0 2dc 6bc ReadEntityBodyChunk 16384 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 49922 0 2dc 6bc ReadEntityBodyChunk 16384 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 66306 0 2dc 6bc ReadEntityBodyChunk 16384 2dc 6bc PostInfoToApp YSERVER_IPC_RECEIVING 82690 0 2dc 6bc ReadEntityBodyChunk 16384

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc 6bc

PostInfoToApp YSERVER_IPC_RECEIVING 99074 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115458 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131842 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148226 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164610 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180994 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197378 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 213762 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 230146 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 246530 0 ReadEntityBodyChunk 12679 PostInfoToApp YSERVER_IPC_RECEIVING 259209 0 closing file C:\Documents and Settings\ianis\Desktop\collage4.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage4.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 9 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 6bc 200 2dc 6bc OK 2dc 6bc sent: 2dc 6bc <<<< 2dc 6bc HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106

the file was received 2dc 6bc >>>> 2dc 6bc leaving HandleFileReceive 2dc 6bc HTTPRequestHandler::~HTTPRequestHandler 2dc 6bc calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 6bc after calling RemoveHTTPRQH, count = 0. 2dc 6bc closesocket: 0x194 2dc 6bc HTTPLog::~HTTPLog 2dc 6bc leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 10 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage5.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471796328collage5.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnkjy227b26z48u14x8 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage5.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage5.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=6C86FC0E8D7B634755EDF48B6AF591A3 2dc 384 2dc 384 2dc 384

wrote Timestamp=6C86FC0E8D7B634755EDF48B6AF591A3 writing to ini file:

W=722032 M=10 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=10 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471796328collage5.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnkjy227b26z48u14x8 2dc 384 szKey: lc9luhmtnkjy227b26z48u14x8 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1500 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x184 2dc 224 HandlerThread 0x1a0 2dc 224 HTTPLog::HTTPLog 2dc 224 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 224 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 224 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 224 about to m_HTTPLog.SetSocket(m_sock) 2dc 224 HTTPLog::SetSocket starting... socket=416

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

224 224 224 224 224 224 224 224 224 224 224 224 224 224 224

HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 1024 bytes Found '\r\n\r\n' allocating entity body buffer to store read overflow from header 759 bytes 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190471796328collage5.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtnkjy227b26z48u14x8 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 187896 Cache-Control: no-cache 2dc 224 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 224 m_pEntityBodyBuffer: 0x364600 2dc 224 m_dwEntityBodyBufferSize: 16384 2dc 224 m_dwNumBytesInEntityBody: 759 2dc 224 HTTPRequestHandler::ParseRequest 2dc 224 m_cRequest: POST 2dc 224 UnescapeName 2dc 224 DecodeURL 2dc 224 before: Messenger 2dc 224 before: Messenger 2dc 224 after: Messenger 2dc 224 UnescapeName 2dc 224 DecodeURL 2dc 224 before: mada_l0ve1 2dc 224 before: mada_l0ve1 2dc 224 after: mada_l0ve1 2dc 224 UnescapeName 2dc 224 DecodeURL 2dc 224 before: lc9luhmtnkjy227b26z48u14x8 2dc 224 before: lc9luhmtnkjy227b26z48u14x8 2dc 224 after: lc9luhmtnkjy227b26z48u14x8 2dc 224 extracted the filename from the URL. saving to m_cFileName: 2dc 224 '/Messenger.mada_l0ve1.1190471796328collage5.jpg' 2dc 224 m_cFileName: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 ProcessYahooRequestParams 2dc 224 DecodeURL 2dc 224 before: Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 ValidateRequest 2dc 224 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'App' default: ''

2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'Messenger' 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'User' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'mada_l0ve1' 2dc 224 ReadIniFileInt 2dc 224 section: [Info] key: 'Post' default: 0 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 1 2dc 224 ValidateRequest: true 2dc 224 request is a Yahoo request 2dc 224 leaving ParseRequest 2dc 224 HandleFileReceive 2dc 224 file name: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 224 UnescapeName 2dc 224 DecodeURL 2dc 224 before: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 before: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 after: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 unescaped file name: /Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 HTTPRequestHandler::ReceiveRedirectedFile 2dc 224 HTTPRedirectHandler::HTTPRedirectHandler 2dc 224 GetBaseURL 2dc 224 bAddrContainsPort: 0 2dc 224 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471796328collage5.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnkjy227b26z48u14x8 2dc 224 HTTPRedirectHandler::Process 2dc 224 ValidateKeys 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'Timestamp' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning '6C86FC0E8D7B634755EDF48B6AF591A3' 2dc 224 szTimeStamp: '6C86FC0E8D7B634755EDF48B6AF591A3' 2dc 224 CSecretKey::CSecretKey 2dc 224 szApp: Messenger 2dc 224 szUser: mada_l0ve1 2dc 224 szTimeStamp: 6C86FC0E8D7B634755EDF48B6AF591A3 2dc 224 CSecretKey::Init(). 2dc 224 m_szAppID: Messenger 2dc 224 m_szUserID: mada_l0ve1 2dc 224 KeyMatches 'lc9luhmtnkjy227b26z48u14x8' 2dc 224 key comparison test passed... continuing 2dc 224 HTTPRedirectHandler::CheckRedirectFile 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 ReadIniFileInt 2dc 224 section: [Info] key: 'Dir' default: 0 2dc 224 file:

C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 0 2dc 224 set m_RType to RedirectTypeSingleFile 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'App' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'Messenger' 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'User' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'mada_l0ve1' 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'Version' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'MSG1.0' 2dc 224 ReadIniFileInt 2dc 224 section: [Info] key: 'Post' default: 0 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 1 2dc 224 m_szINIApp: 'Messenger' 2dc 224 m_szINIUser: 'mada_l0ve1' 2dc 224 m_szINIVersionString: 'MSG1.0' 2dc 224 m_iIsPost: 1 2dc 224 ReadIniFileInt 2dc 224 section: [Info] key: 'W' default: 0 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 722032 2dc 224 m_hWnd: 0xb0470 2dc 224 ReadIniFileInt 2dc 224 section: [Info] key: 'M' default: 0 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 10 2dc 224 m_nMsgNumber: 10 2dc 224 exit HTTPRedirectHandler::CheckRedirectFile 2dc 224 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 224 ReadIniFileString 2dc 224 section: [Info] key: 'Name' default: '' 2dc 224 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471796328collage5.jpg 2dc 224 returning 'C:\Documents and Settings\ianis\Desktop\collage5.jpg' 2dc 224 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 m_bProcessed: 1 [success] 2dc 224 exit HTTPRedirectHandler::Process 2dc 224 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage5.jpg. 2dc 224 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage5.jpg. 2dc 224 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 224 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 m_hWndReporting: 0xb0470 2dc 224 m_nMsgNumber: 10

2dc 224 RedirectType: 1 RedirectTypeSingleFile 2dc 224 bIsPost: 1 2dc 224 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 224 SendMessage 0xb0470 2dc 224 IPCInfo: 2dc 224 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage5.jpg' 2dc 224 cUserID: 'mada_l0ve1' 2dc 224 nStatus: 0 2dc 224 nType: YSERVER_IPC_BEGIN 2dc 224 lFileLen: 0 2dc 224 lCurrBytes: 0 2dc 224 nMessageNumber: 10 2dc 2b0 IsFreeEntryInThreadArray 2dc 224 SendMessage processed 2dc 224 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 ReceiveFile 2dc 224 iContentLength: 187896 2dc 224 ReceiveEntityBody 2dc 224 temp: C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 dwBufSize: 16384 2dc 224 dwNumBufBytesUsed: 759 2dc 224 creating file C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 flushed 759 bytes 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 759 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 17143 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 33527 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 49911 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 66295 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 82679 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 99063 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 115447 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 131831 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 148215 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 164599 0 2dc 224 ReadEntityBodyChunk 16384 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 180983 0 2dc 224 ReadEntityBodyChunk 6913 2dc 224 PostInfoToApp YSERVER_IPC_RECEIVING 187896 0 2dc 224 closing file C:\Documents and Settings\ianis\Desktop\collage5.jpg 2dc 224 PostInfoToApp YSERVER_IPC_FINISHED 0 0 2dc 224 SendMessage 0xb0470 2dc 224 IPCInfo: 2dc 224 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage5.jpg' 2dc 224 cUserID: 'mada_l0ve1' 2dc 224 nStatus: 0 2dc 224 nType: YSERVER_IPC_FINISHED 2dc 224 lFileLen: 0

2dc 2dc 2dc 2dc 2dc 2dc

224 lCurrBytes: 0 224 nMessageNumber: 10 224 SendMessage processed 224 exit HTTPRequestHandler::ReceiveRedirectedFile 224 SendString 224

the file was received 2dc 224 200 2dc 224 OK 2dc 224 sent: 2dc 224 <<<< 2dc 224 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 224 >>>> 2dc 224 leaving HandleFileReceive 2dc 224 HTTPRequestHandler::~HTTPRequestHandler 2dc 224 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 224 after calling RemoveHTTPRQH, count = 0. 2dc 224 closesocket: 0x1a0 2dc 224 HTTPLog::~HTTPLog 2dc 224 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 11 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage6.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName

2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471798375collage6.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnsvxl1zqpi3xbwd876 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage6.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage6.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=035138AB9417D8C3BABA27B4C981D765 2dc 384 2dc 384 2dc 384

wrote Timestamp=035138AB9417D8C3BABA27B4C981D765 writing to ini file:

W=722032 M=11 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=11 writing to ini file:

Post=1 2dc 2dc 2dc 2dc 2dc

384 wrote Post=1 384 exit CreateShortcutFile 384 CreateShortcutFile succeeded. 384 Entering AllocateAndCopyToWideString 384 Leaving AllocateAndCopyToWideStrign

2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471798375collage6.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtnsvxl1zqpi3xbwd876 2dc 384 szKey: lc9luhmtnsvxl1zqpi3xbwd876 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1501 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x190 2dc 408 HandlerThread 0x19c 2dc 408 HTTPLog::HTTPLog 2dc 408 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 408 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 408 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 408 about to m_HTTPLog.SetSocket(m_sock) 2dc 408 HTTPLog::SetSocket starting... socket=412 2dc 408 HTTPLog::SetSocket exiting 2dc 408 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 408 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 408 about to create Kill Comm Event 2dc 408 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 408 HTTPRequestHandler::ReadRequest 2dc 408 HTTPRequestHandler::ReadRequest 2dc 408 received 1024 bytes 2dc 408 Found '\r\n\r\n' 2dc 408 allocating entity body buffer to store read overflow from header 2dc 408 759 bytes 2dc 408 0 ms elapsed 2dc 408 header is: 2dc 408 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 408 POST /Messenger.mada_l0ve1.1190471798375collage6.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtnsvxl1zqpi3xbwd876 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 222560 Cache-Control: no-cache 2dc 2dc 2dc 2dc

408 408 408 408

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x364600 m_dwEntityBodyBufferSize: 16384 m_dwNumBytesInEntityBody: 759

2dc 408 HTTPRequestHandler::ParseRequest 2dc 408 m_cRequest: POST 2dc 408 UnescapeName 2dc 408 DecodeURL 2dc 408 before: Messenger 2dc 408 before: Messenger 2dc 408 after: Messenger 2dc 408 UnescapeName 2dc 408 DecodeURL 2dc 408 before: mada_l0ve1 2dc 408 before: mada_l0ve1 2dc 408 after: mada_l0ve1 2dc 408 UnescapeName 2dc 408 DecodeURL 2dc 408 before: lc9luhmtnsvxl1zqpi3xbwd876 2dc 408 before: lc9luhmtnsvxl1zqpi3xbwd876 2dc 408 after: lc9luhmtnsvxl1zqpi3xbwd876 2dc 408 extracted the filename from the URL. saving to m_cFileName: 2dc 408 '/Messenger.mada_l0ve1.1190471798375collage6.jpg' 2dc 408 m_cFileName: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 ProcessYahooRequestParams 2dc 408 DecodeURL 2dc 408 before: Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 ValidateRequest 2dc 408 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'App' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'Messenger' 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'User' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'mada_l0ve1' 2dc 408 ReadIniFileInt 2dc 408 section: [Info] key: 'Post' default: 0 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 1 2dc 408 ValidateRequest: true 2dc 408 request is a Yahoo request 2dc 408 leaving ParseRequest 2dc 408 HandleFileReceive 2dc 408 file name: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 408 UnescapeName 2dc 408 DecodeURL 2dc 408 before: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 before: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 after: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 unescaped file name: /Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 HTTPRequestHandler::ReceiveRedirectedFile 2dc 408 HTTPRedirectHandler::HTTPRedirectHandler

2dc 408 GetBaseURL 2dc 408 bAddrContainsPort: 0 2dc 408 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471798375collage6.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtnsvxl1zqpi3xbwd876 2dc 408 HTTPRedirectHandler::Process 2dc 408 ValidateKeys 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'Timestamp' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning '035138AB9417D8C3BABA27B4C981D765' 2dc 408 szTimeStamp: '035138AB9417D8C3BABA27B4C981D765' 2dc 408 CSecretKey::CSecretKey 2dc 408 szApp: Messenger 2dc 408 szUser: mada_l0ve1 2dc 408 szTimeStamp: 035138AB9417D8C3BABA27B4C981D765 2dc 408 CSecretKey::Init(). 2dc 408 m_szAppID: Messenger 2dc 408 m_szUserID: mada_l0ve1 2dc 408 KeyMatches 'lc9luhmtnsvxl1zqpi3xbwd876' 2dc 408 key comparison test passed... continuing 2dc 408 HTTPRedirectHandler::CheckRedirectFile 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 ReadIniFileInt 2dc 408 section: [Info] key: 'Dir' default: 0 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 0 2dc 408 set m_RType to RedirectTypeSingleFile 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'App' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'Messenger' 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'User' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'mada_l0ve1' 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'Version' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'MSG1.0' 2dc 408 ReadIniFileInt 2dc 408 section: [Info] key: 'Post' default: 0 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 1 2dc 408 m_szINIApp: 'Messenger' 2dc 408 m_szINIUser: 'mada_l0ve1' 2dc 408 m_szINIVersionString: 'MSG1.0' 2dc 408 m_iIsPost: 1 2dc 408 ReadIniFileInt 2dc 408 section: [Info] key: 'W' default: 0 2dc 408 file:

C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 722032 2dc 408 m_hWnd: 0xb0470 2dc 408 ReadIniFileInt 2dc 408 section: [Info] key: 'M' default: 0 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 11 2dc 408 m_nMsgNumber: 11 2dc 408 exit HTTPRedirectHandler::CheckRedirectFile 2dc 408 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 408 ReadIniFileString 2dc 408 section: [Info] key: 'Name' default: '' 2dc 408 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471798375collage6.jpg 2dc 408 returning 'C:\Documents and Settings\ianis\Desktop\collage6.jpg' 2dc 408 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 408 m_bProcessed: 1 [success] 2dc 408 exit HTTPRedirectHandler::Process 2dc 408 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage6.jpg. 2dc 408 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage6.jpg. 2dc 408 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 408 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 408 m_hWndReporting: 0xb0470 2dc 408 m_nMsgNumber: 11 2dc 408 RedirectType: 1 RedirectTypeSingleFile 2dc 408 bIsPost: 1 2dc 408 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 408 SendMessage 0xb0470 2dc 408 IPCInfo: 2dc 408 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage6.jpg' 2dc 408 cUserID: 'mada_l0ve1' 2dc 408 nStatus: 0 2dc 408 nType: YSERVER_IPC_BEGIN 2dc 408 lFileLen: 0 2dc 408 lCurrBytes: 0 2dc 408 nMessageNumber: 11 2dc 408 SendMessage processed 2dc 408 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 408 ReceiveFile 2dc 408 iContentLength: 222560 2dc 408 ReceiveEntityBody 2dc 408 temp: C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 408 dwBufSize: 16384 2dc 408 dwNumBufBytesUsed: 759 2dc 408 creating file C:\Documents and Settings\ianis\Desktop\collage6.jpg 2dc 408 flushed 759 bytes 2dc 408 PostInfoToApp YSERVER_IPC_RECEIVING 759 0 2dc 408 ReadEntityBodyChunk 16384 2dc 408 PostInfoToApp YSERVER_IPC_RECEIVING 17143 0 2dc 408 ReadEntityBodyChunk 16384 2dc 408 PostInfoToApp YSERVER_IPC_RECEIVING 33527 0 2dc 408 ReadEntityBodyChunk 16384 2dc 408 PostInfoToApp YSERVER_IPC_RECEIVING 49911 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

408 408 408 408 2b0 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408 408

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 66295 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 82679 0 IsFreeEntryInThreadArray ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 99063 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115447 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131831 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148215 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164599 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180983 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197367 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 213751 0 ReadEntityBodyChunk 8809 PostInfoToApp YSERVER_IPC_RECEIVING 222560 0 closing file C:\Documents and Settings\ianis\Desktop\collage6.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage6.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 11 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 408 200 2dc 408 OK 2dc 408 sent: 2dc 408 <<<< 2dc 408 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106

the file was received 2dc 408 >>>> 2dc 408 leaving HandleFileReceive 2dc 408 HTTPRequestHandler::~HTTPRequestHandler 2dc 408 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 408 after calling RemoveHTTPRQH, count = 0. 2dc 408 closesocket: 0x19c 2dc 408 HTTPLog::~HTTPLog 2dc 408 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 12 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage7.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471800328collage7.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtncfhcxr2b6sm42g 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage7.jpg Version=MSG1.0 2dc 384 2dc 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage7.jpg wrote Version=MSG1.0

2dc 384 2dc 384

writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=4C9ACE46B8074B9CEF867D86B4DF46D3 2dc 384 2dc 384 2dc 384

wrote Timestamp=4C9ACE46B8074B9CEF867D86B4DF46D3 writing to ini file:

W=722032 M=12 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=12 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471800328collage7.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtncfhcxr2b6sm42g 2dc 384 szKey: lc9luhmtncfhcxr2b6sm42g 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1502 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x18c 2dc 400 HandlerThread 0x198 2dc 400 HTTPLog::HTTPLog 2dc 400 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 400 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 400 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data'

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

400 400 400 400 400 400 400 400 400 400 400 400 400 400 400

about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=408 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 262 bytes Found '\r\n\r\n' 16 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190471800328collage7.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtncfhcxr2b6sm42g HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 248478 Cache-Control: no-cache 2dc 400 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 400 m_pEntityBodyBuffer: 0x0 2dc 400 m_dwEntityBodyBufferSize: 0 2dc 400 m_dwNumBytesInEntityBody: 0 2dc 400 HTTPRequestHandler::ParseRequest 2dc 400 m_cRequest: POST 2dc 400 UnescapeName 2dc 400 DecodeURL 2dc 400 before: Messenger 2dc 400 before: Messenger 2dc 400 after: Messenger 2dc 400 UnescapeName 2dc 400 DecodeURL 2dc 400 before: mada_l0ve1 2dc 400 before: mada_l0ve1 2dc 400 after: mada_l0ve1 2dc 400 UnescapeName 2dc 400 DecodeURL 2dc 400 before: lc9luhmtncfhcxr2b6sm42g 2dc 400 before: lc9luhmtncfhcxr2b6sm42g 2dc 400 after: lc9luhmtncfhcxr2b6sm42g 2dc 400 extracted the filename from the URL. saving to m_cFileName: 2dc 400 '/Messenger.mada_l0ve1.1190471800328collage7.jpg' 2dc 400 m_cFileName: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 ProcessYahooRequestParams 2dc 400 DecodeURL 2dc 400 before: Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 ValidateRequest 2dc 400 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'App' default: ''

2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'Messenger' 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'User' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'mada_l0ve1' 2dc 400 ReadIniFileInt 2dc 400 section: [Info] key: 'Post' default: 0 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 1 2dc 400 ValidateRequest: true 2dc 400 request is a Yahoo request 2dc 400 leaving ParseRequest 2dc 400 HandleFileReceive 2dc 400 file name: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 400 UnescapeName 2dc 400 DecodeURL 2dc 400 before: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 before: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 after: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 unescaped file name: /Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 HTTPRequestHandler::ReceiveRedirectedFile 2dc 400 HTTPRedirectHandler::HTTPRedirectHandler 2dc 400 GetBaseURL 2dc 400 bAddrContainsPort: 0 2dc 400 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471800328collage7.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtncfhcxr2b6sm42g 2dc 400 HTTPRedirectHandler::Process 2dc 400 ValidateKeys 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'Timestamp' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning '4C9ACE46B8074B9CEF867D86B4DF46D3' 2dc 400 szTimeStamp: '4C9ACE46B8074B9CEF867D86B4DF46D3' 2dc 400 CSecretKey::CSecretKey 2dc 400 szApp: Messenger 2dc 400 szUser: mada_l0ve1 2dc 400 szTimeStamp: 4C9ACE46B8074B9CEF867D86B4DF46D3 2dc 400 CSecretKey::Init(). 2dc 400 m_szAppID: Messenger 2dc 400 m_szUserID: mada_l0ve1 2dc 400 KeyMatches 'lc9luhmtncfhcxr2b6sm42g' 2dc 400 key comparison test passed... continuing 2dc 400 HTTPRedirectHandler::CheckRedirectFile 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 ReadIniFileInt 2dc 400 section: [Info] key: 'Dir' default: 0 2dc 400 file:

C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 0 2dc 400 set m_RType to RedirectTypeSingleFile 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'App' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'Messenger' 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'User' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'mada_l0ve1' 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'Version' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'MSG1.0' 2dc 400 ReadIniFileInt 2dc 400 section: [Info] key: 'Post' default: 0 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 1 2dc 400 m_szINIApp: 'Messenger' 2dc 400 m_szINIUser: 'mada_l0ve1' 2dc 400 m_szINIVersionString: 'MSG1.0' 2dc 400 m_iIsPost: 1 2dc 400 ReadIniFileInt 2dc 400 section: [Info] key: 'W' default: 0 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 722032 2dc 400 m_hWnd: 0xb0470 2dc 400 ReadIniFileInt 2dc 400 section: [Info] key: 'M' default: 0 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 12 2dc 400 m_nMsgNumber: 12 2dc 400 exit HTTPRedirectHandler::CheckRedirectFile 2dc 400 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 400 ReadIniFileString 2dc 400 section: [Info] key: 'Name' default: '' 2dc 400 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471800328collage7.jpg 2dc 400 returning 'C:\Documents and Settings\ianis\Desktop\collage7.jpg' 2dc 400 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 m_bProcessed: 1 [success] 2dc 400 exit HTTPRedirectHandler::Process 2dc 400 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage7.jpg. 2dc 400 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage7.jpg. 2dc 400 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 400 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 m_hWndReporting: 0xb0470 2dc 400 m_nMsgNumber: 12

2dc 400 RedirectType: 1 RedirectTypeSingleFile 2dc 400 bIsPost: 1 2dc 400 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 400 SendMessage 0xb0470 2dc 400 IPCInfo: 2dc 400 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage7.jpg' 2dc 400 cUserID: 'mada_l0ve1' 2dc 400 nStatus: 0 2dc 400 nType: YSERVER_IPC_BEGIN 2dc 400 lFileLen: 0 2dc 400 lCurrBytes: 0 2dc 400 nMessageNumber: 12 2dc 400 SendMessage processed 2dc 400 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 ReceiveFile 2dc 400 iContentLength: 248478 2dc 400 ReceiveEntityBody 2dc 400 temp: C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 dwBufSize: 16384 2dc 400 dwNumBufBytesUsed: 0 2dc 400 creating file C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 16384 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 32768 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 49152 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 65536 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 81920 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 98304 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 114688 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 131072 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 147456 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 163840 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 180224 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 196608 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 212992 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 229376 0 2dc 400 ReadEntityBodyChunk 16384 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 245760 0 2dc 400 ReadEntityBodyChunk 2718 2dc 400 PostInfoToApp YSERVER_IPC_RECEIVING 248478 0 2dc 400 closing file C:\Documents and Settings\ianis\Desktop\collage7.jpg 2dc 400 PostInfoToApp YSERVER_IPC_FINISHED 0 0 2dc 400 SendMessage 0xb0470 2dc 400 IPCInfo:

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

400 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage7.jpg' 400 cUserID: 'mada_l0ve1' 400 nStatus: 0 400 nType: YSERVER_IPC_FINISHED 400 lFileLen: 0 400 lCurrBytes: 0 400 nMessageNumber: 12 400 SendMessage processed 400 exit HTTPRequestHandler::ReceiveRedirectedFile 400 SendString 400

the file was received 2dc 400 200 2dc 400 OK 2dc 400 sent: 2dc 400 <<<< 2dc 400 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 400 >>>> 2dc 400 leaving HandleFileReceive 2dc 400 HTTPRequestHandler::~HTTPRequestHandler 2dc 400 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 400 after calling RemoveHTTPRQH, count = 0. 2dc 400 closesocket: 0x198 2dc 2b0 IsFreeEntryInThreadArray 2dc 400 HTTPLog::~HTTPLog 2dc 400 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 13 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0'

2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage8.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471801343collage8.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtno5xciahn5vnf2i864 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\collage8.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage8.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=816509193EC0B6F0D91C8C0FEB610FD7 2dc 384 2dc 384 2dc 384

wrote Timestamp=816509193EC0B6F0D91C8C0FEB610FD7 writing to ini file:

W=722032 M=13 2dc 2dc 2dc 2dc

384 384 384 384

Post=1

wrote W=722032 wrote M=13 writing to ini file:

2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471801343collage8.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtno5xciahn5vnf2i864 2dc 384 szKey: lc9luhmtno5xciahn5vnf2i864 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1503 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x188 2dc 56c HandlerThread 0x194 2dc 56c HTTPLog::HTTPLog 2dc 56c HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 56c home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 56c m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 56c about to m_HTTPLog.SetSocket(m_sock) 2dc 56c HTTPLog::SetSocket starting... socket=404 2dc 56c HTTPLog::SetSocket exiting 2dc 56c about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 56c after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 56c about to create Kill Comm Event 2dc 56c leaving HTTPRequestHandler::HTTPRequestHandler 2dc 56c HTTPRequestHandler::ReadRequest 2dc 56c HTTPRequestHandler::ReadRequest 2dc 56c received 265 bytes 2dc 56c Found '\r\n\r\n' 2dc 56c 15 ms elapsed 2dc 56c header is: 2dc 56c <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 56c POST /Messenger.mada_l0ve1.1190471801343collage8.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtno5xciahn5vnf2i864 HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 255953 Cache-Control: no-cache

2dc 56c >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 56c m_pEntityBodyBuffer: 0x0 2dc 56c m_dwEntityBodyBufferSize: 0 2dc 56c m_dwNumBytesInEntityBody: 0 2dc 56c HTTPRequestHandler::ParseRequest 2dc 56c m_cRequest: POST 2dc 56c UnescapeName 2dc 56c DecodeURL 2dc 56c before: Messenger 2dc 56c before: Messenger 2dc 56c after: Messenger 2dc 56c UnescapeName 2dc 56c DecodeURL 2dc 56c before: mada_l0ve1 2dc 56c before: mada_l0ve1 2dc 56c after: mada_l0ve1 2dc 56c UnescapeName 2dc 56c DecodeURL 2dc 56c before: lc9luhmtno5xciahn5vnf2i864 2dc 56c before: lc9luhmtno5xciahn5vnf2i864 2dc 56c after: lc9luhmtno5xciahn5vnf2i864 2dc 56c extracted the filename from the URL. saving to m_cFileName: 2dc 56c '/Messenger.mada_l0ve1.1190471801343collage8.jpg' 2dc 56c m_cFileName: /Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c ProcessYahooRequestParams 2dc 56c DecodeURL 2dc 56c before: Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c ValidateRequest 2dc 56c C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'App' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'Messenger' 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'User' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'mada_l0ve1' 2dc 56c ReadIniFileInt 2dc 56c section: [Info] key: 'Post' default: 0 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 1 2dc 56c ValidateRequest: true 2dc 56c request is a Yahoo request 2dc 56c leaving ParseRequest 2dc 56c HandleFileReceive 2dc 56c file name: /Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 56c UnescapeName 2dc 56c DecodeURL 2dc 56c before: /Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c before: /Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c after: /Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c unescaped file name: /Messenger.mada_l0ve1.1190471801343collage8.jpg

2dc 56c full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c HTTPRequestHandler::ReceiveRedirectedFile 2dc 56c HTTPRedirectHandler::HTTPRedirectHandler 2dc 56c GetBaseURL 2dc 56c bAddrContainsPort: 0 2dc 56c set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471801343collage8.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtno5xciahn5vnf2i864 2dc 56c HTTPRedirectHandler::Process 2dc 56c ValidateKeys 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'Timestamp' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning '816509193EC0B6F0D91C8C0FEB610FD7' 2dc 56c szTimeStamp: '816509193EC0B6F0D91C8C0FEB610FD7' 2dc 56c CSecretKey::CSecretKey 2dc 56c szApp: Messenger 2dc 56c szUser: mada_l0ve1 2dc 56c szTimeStamp: 816509193EC0B6F0D91C8C0FEB610FD7 2dc 56c CSecretKey::Init(). 2dc 56c m_szAppID: Messenger 2dc 56c m_szUserID: mada_l0ve1 2dc 56c KeyMatches 'lc9luhmtno5xciahn5vnf2i864' 2dc 56c key comparison test passed... continuing 2dc 56c HTTPRedirectHandler::CheckRedirectFile 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c ReadIniFileInt 2dc 56c section: [Info] key: 'Dir' default: 0 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 0 2dc 56c set m_RType to RedirectTypeSingleFile 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'App' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'Messenger' 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'User' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'mada_l0ve1' 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'Version' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'MSG1.0' 2dc 56c ReadIniFileInt 2dc 56c section: [Info] key: 'Post' default: 0 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 1 2dc 56c m_szINIApp: 'Messenger' 2dc 56c m_szINIUser: 'mada_l0ve1' 2dc 56c m_szINIVersionString: 'MSG1.0'

2dc 56c m_iIsPost: 1 2dc 56c ReadIniFileInt 2dc 56c section: [Info] key: 'W' default: 0 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 722032 2dc 56c m_hWnd: 0xb0470 2dc 56c ReadIniFileInt 2dc 56c section: [Info] key: 'M' default: 0 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 13 2dc 56c m_nMsgNumber: 13 2dc 56c exit HTTPRedirectHandler::CheckRedirectFile 2dc 56c HTTPRedirectHandler::HandleRedirectSingleFile 2dc 56c ReadIniFileString 2dc 56c section: [Info] key: 'Name' default: '' 2dc 56c file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471801343collage8.jpg 2dc 56c returning 'C:\Documents and Settings\ianis\Desktop\collage8.jpg' 2dc 56c set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 56c m_bProcessed: 1 [success] 2dc 56c exit HTTPRedirectHandler::Process 2dc 56c GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage8.jpg. 2dc 56c szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage8.jpg. 2dc 56c HTTPRedirectHandler::~HTTPRedirectHandler 2dc 56c m_cFileName: C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 56c m_hWndReporting: 0xb0470 2dc 56c m_nMsgNumber: 13 2dc 56c RedirectType: 1 RedirectTypeSingleFile 2dc 56c bIsPost: 1 2dc 56c PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 56c SendMessage 0xb0470 2dc 56c IPCInfo: 2dc 56c cFileName: 'C:\Documents and Settings\ianis\Desktop\collage8.jpg' 2dc 56c cUserID: 'mada_l0ve1' 2dc 56c nStatus: 0 2dc 56c nType: YSERVER_IPC_BEGIN 2dc 56c lFileLen: 0 2dc 56c lCurrBytes: 0 2dc 56c nMessageNumber: 13 2dc 56c SendMessage processed 2dc 56c calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 56c ReceiveFile 2dc 56c iContentLength: 255953 2dc 56c ReceiveEntityBody 2dc 56c temp: C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 56c dwBufSize: 16384 2dc 56c dwNumBufBytesUsed: 0 2dc 56c creating file C:\Documents and Settings\ianis\Desktop\collage8.jpg 2dc 56c ReadEntityBodyChunk 16384 2dc 56c PostInfoToApp YSERVER_IPC_RECEIVING 16384 0 2dc 56c ReadEntityBodyChunk 16384 2dc 56c PostInfoToApp YSERVER_IPC_RECEIVING 32768 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 2b0 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c 56c

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 49152 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 65536 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 81920 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 98304 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 114688 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131072 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 147456 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 163840 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180224 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 196608 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 212992 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 229376 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 245760 0 IsFreeEntryInThreadArray ReadEntityBodyChunk 10193 PostInfoToApp YSERVER_IPC_RECEIVING 255953 0 closing file C:\Documents and Settings\ianis\Desktop\collage8.jpg PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\collage8.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 13 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 56c 200 2dc 56c OK 2dc 56c sent: 2dc 56c <<<< 2dc 56c

HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 56c >>>> 2dc 56c leaving HandleFileReceive 2dc 56c HTTPRequestHandler::~HTTPRequestHandler 2dc 56c calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 56c after calling RemoveHTTPRQH, count = 0. 2dc 56c closesocket: 0x194 2dc 56c HTTPLog::~HTTPLog 2dc 56c leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 14 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\collage9.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190471802406collage9.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtn4wjt 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384

[Info] Name=C:\Documents and Settings\ianis\Desktop\collage9.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\collage9.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=A453B4DC78E95EC2436219DC1D2EC24D 2dc 384 2dc 384 2dc 384

wrote Timestamp=A453B4DC78E95EC2436219DC1D2EC24D writing to ini file:

W=722032 M=14 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=14 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190471802406collage9.jpg?AppID=Messenge r&UserID=mada_l0ve1&K=lc9luhmtn4wjt 2dc 384 szKey: lc9luhmtn4wjt 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1504 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 CloseHandle thread 0x184 88 HandlerThread 0x1a0 88 HTTPLog::HTTPLog 88 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 88 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 88 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 88 about to m_HTTPLog.SetSocket(m_sock) 88 HTTPLog::SetSocket starting... socket=416 88 HTTPLog::SetSocket exiting 88 about to g_RQT.AddHTTPRQH(this), this = 3555216 88 after calling g_RQT.AddHTTPRQH(this). total count = 1. 88 about to create Kill Comm Event 88 leaving HTTPRequestHandler::HTTPRequestHandler 88 HTTPRequestHandler::ReadRequest 88 HTTPRequestHandler::ReadRequest 88 received 1024 bytes 88 Found '\r\n\r\n' 88 allocating entity body buffer to store read overflow from header 88 772 bytes 88 0 ms elapsed 88 header is: 88 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 88

POST /Messenger.mada_l0ve1.1190471802406collage9.jpg?AppID=Messenger&UserID=mada_l0ve1& K=lc9luhmtn4wjt HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 298341 Cache-Control: no-cache 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x364600 m_dwEntityBodyBufferSize: 16384 m_dwNumBytesInEntityBody: 772 HTTPRequestHandler::ParseRequest m_cRequest: POST UnescapeName DecodeURL before: Messenger before: Messenger after: Messenger UnescapeName DecodeURL before: mada_l0ve1 before: mada_l0ve1 after: mada_l0ve1 UnescapeName DecodeURL before: lc9luhmtn4wjt before: lc9luhmtn4wjt after: lc9luhmtn4wjt extracted the filename from the URL. saving to m_cFileName: '/Messenger.mada_l0ve1.1190471802406collage9.jpg' m_cFileName: /Messenger.mada_l0ve1.1190471802406collage9.jpg

2dc 88 ProcessYahooRequestParams 2dc 88 DecodeURL 2dc 88 before: Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 ValidateRequest 2dc 88 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'App' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'Messenger' 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'User' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'mada_l0ve1' 2dc 88 ReadIniFileInt 2dc 88 section: [Info] key: 'Post' default: 0 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 1 2dc 88 ValidateRequest: true 2dc 88 request is a Yahoo request 2dc 88 leaving ParseRequest 2dc 88 HandleFileReceive 2dc 88 file name: /Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 88 UnescapeName 2dc 88 DecodeURL 2dc 88 before: /Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 before: /Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 after: /Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 unescaped file name: /Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 HTTPRequestHandler::ReceiveRedirectedFile 2dc 88 HTTPRedirectHandler::HTTPRedirectHandler 2dc 88 GetBaseURL 2dc 88 bAddrContainsPort: 0 2dc 88 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190471802406collage9.jpg?AppID=Messeng er&UserID=mada_l0ve1&K=lc9luhmtn4wjt 2dc 88 HTTPRedirectHandler::Process 2dc 88 ValidateKeys 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'Timestamp' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'A453B4DC78E95EC2436219DC1D2EC24D' 2dc 88 szTimeStamp: 'A453B4DC78E95EC2436219DC1D2EC24D' 2dc 88 CSecretKey::CSecretKey 2dc 88 szApp: Messenger 2dc 88 szUser: mada_l0ve1 2dc 88 szTimeStamp: A453B4DC78E95EC2436219DC1D2EC24D 2dc 88 CSecretKey::Init(). 2dc 88 m_szAppID: Messenger 2dc 88 m_szUserID: mada_l0ve1

2dc 88 KeyMatches 'lc9luhmtn4wjt' 2dc 88 key comparison test passed... continuing 2dc 88 HTTPRedirectHandler::CheckRedirectFile 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 ReadIniFileInt 2dc 88 section: [Info] key: 'Dir' default: 0 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 0 2dc 88 set m_RType to RedirectTypeSingleFile 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'App' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'Messenger' 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'User' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'mada_l0ve1' 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'Version' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'MSG1.0' 2dc 88 ReadIniFileInt 2dc 88 section: [Info] key: 'Post' default: 0 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 1 2dc 88 m_szINIApp: 'Messenger' 2dc 88 m_szINIUser: 'mada_l0ve1' 2dc 88 m_szINIVersionString: 'MSG1.0' 2dc 88 m_iIsPost: 1 2dc 88 ReadIniFileInt 2dc 88 section: [Info] key: 'W' default: 0 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 722032 2dc 88 m_hWnd: 0xb0470 2dc 88 ReadIniFileInt 2dc 88 section: [Info] key: 'M' default: 0 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 14 2dc 88 m_nMsgNumber: 14 2dc 88 exit HTTPRedirectHandler::CheckRedirectFile 2dc 88 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 88 ReadIniFileString 2dc 88 section: [Info] key: 'Name' default: '' 2dc 88 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190471802406collage9.jpg 2dc 88 returning 'C:\Documents and Settings\ianis\Desktop\collage9.jpg' 2dc 88 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 88 m_bProcessed: 1 [success] 2dc 88 exit HTTPRedirectHandler::Process

2dc 88 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\collage9.jpg. 2dc 88 szOutputFilename is C:\Documents and Settings\ianis\Desktop\collage9.jpg. 2dc 88 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 88 m_cFileName: C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 88 m_hWndReporting: 0xb0470 2dc 88 m_nMsgNumber: 14 2dc 88 RedirectType: 1 RedirectTypeSingleFile 2dc 88 bIsPost: 1 2dc 88 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 88 SendMessage 0xb0470 2dc 88 IPCInfo: 2dc 88 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage9.jpg' 2dc 88 cUserID: 'mada_l0ve1' 2dc 88 nStatus: 0 2dc 88 nType: YSERVER_IPC_BEGIN 2dc 88 lFileLen: 0 2dc 88 lCurrBytes: 0 2dc 88 nMessageNumber: 14 2dc 88 SendMessage processed 2dc 88 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 88 ReceiveFile 2dc 88 iContentLength: 298341 2dc 88 ReceiveEntityBody 2dc 88 temp: C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 88 dwBufSize: 16384 2dc 88 dwNumBufBytesUsed: 772 2dc 88 creating file C:\Documents and Settings\ianis\Desktop\collage9.jpg 2dc 88 flushed 772 bytes 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 772 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 17156 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 33540 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 49924 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 66308 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 82692 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 99076 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 115460 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 131844 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 148228 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 164612 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 180996 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 197380 0 2dc 88 ReadEntityBodyChunk 16384 2dc 88 PostInfoToApp YSERVER_IPC_RECEIVING 213764 0 2dc 88 ReadEntityBodyChunk 16384

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

88 PostInfoToApp YSERVER_IPC_RECEIVING 230148 0 88 ReadEntityBodyChunk 16384 88 PostInfoToApp YSERVER_IPC_RECEIVING 246532 0 88 ReadEntityBodyChunk 16384 88 PostInfoToApp YSERVER_IPC_RECEIVING 262916 0 88 ReadEntityBodyChunk 16384 88 PostInfoToApp YSERVER_IPC_RECEIVING 279300 0 88 ReadEntityBodyChunk 16384 88 PostInfoToApp YSERVER_IPC_RECEIVING 295684 0 88 ReadEntityBodyChunk 2657 88 PostInfoToApp YSERVER_IPC_RECEIVING 298341 0 2b0 IsFreeEntryInThreadArray 88 closing file C:\Documents and Settings\ianis\Desktop\collage9.jpg 88 PostInfoToApp YSERVER_IPC_FINISHED 0 0 88 SendMessage 0xb0470 88 IPCInfo: 88 cFileName: 'C:\Documents and Settings\ianis\Desktop\collage9.jpg' 88 cUserID: 'mada_l0ve1' 88 nStatus: 0 88 nType: YSERVER_IPC_FINISHED 88 lFileLen: 0 88 lCurrBytes: 0 88 nMessageNumber: 14 88 SendMessage processed 88 exit HTTPRequestHandler::ReceiveRedirectedFile 88 SendString 88

the file was received 2dc 88 200 2dc 88 OK 2dc 88 sent: 2dc 88 <<<< 2dc 88 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc 88 >>>> 2dc 88 leaving HandleFileReceive 2dc 88 HTTPRequestHandler::~HTTPRequestHandler

2dc 88 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 88 after calling RemoveHTTPRQH, count = 0. 2dc 88 closesocket: 0x1a0 2dc 88 HTTPLog::~HTTPLog 2dc 88 leaving HandlerThread 2dc 384 CYServerComponent::SubmitFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: D:\Poze\diverse\14-09-07_1621.jpg 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 15 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 0 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=D:\Poze\diverse\14-09-07_1621.jpg Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=D:\Poze\diverse\14-09-07_1621.jpg wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=14F7E965CB8D71AA83C1F3B3CE26B6F7 2dc 384 2dc 384 2dc 384

wrote Timestamp=14F7E965CB8D71AA83C1F3B3CE26B6F7 writing to ini file:

W=722032 M=15 2dc 384 wrote W=722032 2dc 384 wrote M=15 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 2dc 384 szKey: lc9luhmtnwgbo2x94 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 384 leaving SubmitFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1570 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x190 2dc 8ac HandlerThread 0x114 2dc 8ac HTTPLog::HTTPLog 2dc 8ac HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 8ac home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 8ac m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 8ac about to m_HTTPLog.SetSocket(m_sock) 2dc 8ac HTTPLog::SetSocket starting... socket=276 2dc 8ac HTTPLog::SetSocket exiting 2dc 8ac about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 8ac after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 8ac about to create Kill Comm Event 2dc 8ac leaving HTTPRequestHandler::HTTPRequestHandler 2dc 8ac HTTPRequestHandler::ReadRequest 2dc 8ac HTTPRequestHandler::ReadRequest 2dc 8ac received 250 bytes 2dc 8ac Found '\r\n\r\n' 2dc 8ac 0 ms elapsed 2dc 8ac header is: 2dc 8ac <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 8ac HEAD /Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 HTTP/1.1

Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 0 Cache-Control: no-cache 2dc 8ac >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 2dc 8ac m_pEntityBodyBuffer: 0x0 2dc 8ac m_dwEntityBodyBufferSize: 0 2dc 8ac m_dwNumBytesInEntityBody: 0 2dc 8ac HTTPRequestHandler::ParseRequest 2dc 8ac m_cRequest: HEAD 2dc 8ac UnescapeName 2dc 8ac DecodeURL 2dc 8ac before: Messenger 2dc 8ac before: Messenger 2dc 8ac after: Messenger 2dc 8ac UnescapeName 2dc 8ac DecodeURL 2dc 8ac before: mada_l0ve1 2dc 8ac before: mada_l0ve1 2dc 8ac after: mada_l0ve1 2dc 8ac UnescapeName 2dc 8ac DecodeURL 2dc 8ac before: lc9luhmtnwgbo2x94 2dc 8ac before: lc9luhmtnwgbo2x94 2dc 8ac after: lc9luhmtnwgbo2x94 2dc 8ac extracted the filename from the URL. saving to m_cFileName: 2dc 8ac '/Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg' 2dc 8ac m_cFileName: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac ProcessYahooRequestParams 2dc 8ac DecodeURL 2dc 8ac before: Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac ValidateRequest 2dc 8ac C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.11904738047651409-07_1621.jpg 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'App' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'Messenger' 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'User' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'mada_l0ve1' 2dc 8ac ReadIniFileInt 2dc 8ac section: [Info] key: 'Post' default: 0 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 0 2dc 8ac ValidateRequest: true 2dc 8ac request is a Yahoo request 2dc 8ac FigureFileExtension

2dc 8ac setting file extension: .jpg 2dc 8ac FigureMimeType 2dc 8ac LookupMimeType .jpg 2dc 8ac GetRegistryString '.jpg' 'Content Type' 2dc 8ac returning 'image/jpeg' 2dc 8ac set m_szMimeType to image/jpeg 2dc 8ac leaving ParseRequest 2dc 8ac HTTPRequestHandler::HandleFileSend '' 2dc 8ac file name: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 8ac UnescapeName 2dc 8ac DecodeURL 2dc 8ac before: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac before: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac after: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8ac unescaped file name: /Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac HTTPRequestHandler::SendRedirectedFile 2dc 8ac HTTPRedirectHandler::HTTPRedirectHandler 2dc 8ac GetBaseURL 2dc 8ac bAddrContainsPort: 0 2dc 8ac set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 2dc 8ac HTTPRedirectHandler::Process 2dc 8ac ValidateKeys 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'Timestamp' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning '14F7E965CB8D71AA83C1F3B3CE26B6F7' 2dc 8ac szTimeStamp: '14F7E965CB8D71AA83C1F3B3CE26B6F7' 2dc 8ac CSecretKey::CSecretKey 2dc 8ac szApp: Messenger 2dc 8ac szUser: mada_l0ve1 2dc 8ac szTimeStamp: 14F7E965CB8D71AA83C1F3B3CE26B6F7 2dc 8ac CSecretKey::Init(). 2dc 8ac m_szAppID: Messenger 2dc 8ac m_szUserID: mada_l0ve1 2dc 8ac KeyMatches 'lc9luhmtnwgbo2x94' 2dc 8ac key comparison test passed... continuing 2dc 8ac HTTPRedirectHandler::CheckRedirectFile 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac ReadIniFileInt 2dc 8ac section: [Info] key: 'Dir' default: 0 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 0 2dc 8ac set m_RType to RedirectTypeSingleFile 2dc 8ac ReadIniFileString

2dc 8ac section: [Info] key: 'App' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'Messenger' 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'User' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'mada_l0ve1' 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'Version' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'MSG1.0' 2dc 8ac ReadIniFileInt 2dc 8ac section: [Info] key: 'Post' default: 0 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 0 2dc 8ac m_szINIApp: 'Messenger' 2dc 8ac m_szINIUser: 'mada_l0ve1' 2dc 8ac m_szINIVersionString: 'MSG1.0' 2dc 8ac m_iIsPost: 0 2dc 8ac ReadIniFileInt 2dc 8ac section: [Info] key: 'W' default: 0 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 722032 2dc 8ac m_hWnd: 0xb0470 2dc 8ac ReadIniFileInt 2dc 8ac section: [Info] key: 'M' default: 0 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 15 2dc 8ac m_nMsgNumber: 15 2dc 8ac exit HTTPRedirectHandler::CheckRedirectFile 2dc 8ac HTTPRedirectHandler::HandleRedirectSingleFile 2dc 8ac ReadIniFileString 2dc 8ac section: [Info] key: 'Name' default: '' 2dc 8ac file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8ac returning 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 8ac set m_szFileToTransfer to D:\Poze\diverse\14-09-07_1621.jpg 2dc 8ac m_bProcessed: 1 [success] 2dc 8ac exit HTTPRedirectHandler::Process 2dc 8ac GetRedirInfo(), OutputFileName is D:\Poze\diverse\14-0907_1621.jpg. 2dc 8ac szOutputFilename is D:\Poze\diverse\14-09-07_1621.jpg. 2dc 8ac HTTPRedirectHandler::~HTTPRedirectHandler 2dc 8ac m_cFileName: D:\Poze\diverse\14-09-07_1621.jpg 2dc 8ac m_hWndReporting: 0xb0470

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac

m_nMsgNumber: 15 RedirectType: 1 RedirectTypeSingleFile bIsPost: 0 m_cFileName: D:\Poze\diverse\14-09-07_1621.jpg m_hWndReporting: 0xb0470 m_nMsgNumber: 15 RedirectType: 1 RedirectTypeSingleFile calling SendFile D:\Poze\diverse\14-09-07_1621.jpg HTTPRequestHandler::SendFile 'D:\Poze\diverse\14-09-07_1621.jpg' GetRegistryInt 'Software\Yahoo\YServer' 'InterimSleep' 0 GetRegistryString 'Software\Yahoo\YServer' 'InterimSleep' RegQueryValueExt failed 2 for 'InterimSleep' GetRegistryInt 'Software\Yahoo\YServer' 'ReportingInterval' 0 GetRegistryString 'Software\Yahoo\YServer' 'ReportingInterval' RegQueryValueExt failed 2 for 'ReportingInterval' GetRegistryInt 'Software\Yahoo\YServer' 'DontReportByPercent' 0 GetRegistryString 'Software\Yahoo\YServer' 'DontReportByPercent' RegQueryValueExt failed 2 for 'DontReportByPercent' SendFile - About to read file D:\Poze\diverse\14-09-07_1621.jpg Opened 'D:\Poze\diverse\14-09-07_1621.jpg' OK set m_lFileLen to 326098 HTTPRequestHandler::FormatHeader 200 OK 326098 send header: <<<<<

HTTP/1.0 200 OK Date: Sat Sep 22 18:10:05 2007 GMT Server: Y!/1.0 MIME-version: 1.0 Content-type: image/jpeg Last-modified: Sat Sep 22 18:10:05 2007 GMT Content-length: 326098 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 8ac 2b0 2b0 2b0 2b0 2b0 2b0 2b0

>>>>> calling send on 114: header 185 bytes send returned 185 sent HEAD response leaving HTTPRequestHandler::SendFile exit HTTPRequestHandler::SendRedirectedFile leaving HandleFileSend HTTPRequestHandler::~HTTPRequestHandler calling g_RQT.RemoveHTTPRQH, this = 3555216. after calling RemoveHTTPRQH, count = 0. closesocket: 0x114 HTTPLog::~HTTPLog leaving HandlerThread IsFreeEntryInThreadArray CloseHandle thread 0x1a0 accept connection from: IP addr: 192.168.1.189 port: 1571 accept socket: IP addr: 192.168.1.206

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 2b0 2b0 2b0 2b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0

port: 80 spawning new Handler thread ReportInitProgress AddHandlerThreadToThreadArray IsFreeEntryInThreadArray HandlerThread 0x1a0 HTTPLog::HTTPLog HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=416 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 216 bytes Found '\r\n\r\n' 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

GET /Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Connection: Keep-Alive 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x0 m_dwEntityBodyBufferSize: 0 m_dwNumBytesInEntityBody: 0 HTTPRequestHandler::ParseRequest m_cRequest: GET UnescapeName DecodeURL before: Messenger before: Messenger after: Messenger UnescapeName DecodeURL before: mada_l0ve1 before: mada_l0ve1 after: mada_l0ve1 UnescapeName DecodeURL before: lc9luhmtnwgbo2x94 before: lc9luhmtnwgbo2x94 after: lc9luhmtnwgbo2x94 extracted the filename from the URL. saving to m_cFileName: '/Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg' m_cFileName: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg ProcessYahooRequestParams

2dc 8b0 DecodeURL 2dc 8b0 before: Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8b0 ValidateRequest 2dc 8b0 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.11904738047651409-07_1621.jpg 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'App' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'Messenger' 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'User' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'mada_l0ve1' 2dc 8b0 ReadIniFileInt 2dc 8b0 section: [Info] key: 'Post' default: 0 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 0 2dc 8b0 ValidateRequest: true 2dc 8b0 request is a Yahoo request 2dc 8b0 FigureFileExtension 2dc 8b0 setting file extension: .jpg 2dc 8b0 FigureMimeType 2dc 8b0 LookupMimeType .jpg 2dc 8b0 GetRegistryString '.jpg' 'Content Type' 2dc 8b0 returning 'image/jpeg' 2dc 8b0 set m_szMimeType to image/jpeg 2dc 8b0 leaving ParseRequest 2dc 8b0 HTTPRequestHandler::HandleFileSend '' 2dc 8b0 file name: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8b0 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 8b0 UnescapeName 2dc 8b0 DecodeURL 2dc 8b0 before: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8b0 before: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8b0 after: /Messenger.mada_l0ve1.119047380476514-09-07_1621.jpg 2dc 8b0 unescaped file name: /Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 HTTPRequestHandler::SendRedirectedFile 2dc 8b0 HTTPRedirectHandler::HTTPRedirectHandler 2dc 8b0 GetBaseURL 2dc 8b0 bAddrContainsPort: 0 2dc 8b0 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.119047380476514-0907_1621.jpg?AppID=Messenger&UserID=mada_l0ve1&K=lc9luhmtnwgbo2x94 2dc 8b0 HTTPRedirectHandler::Process 2dc 8b0 ValidateKeys 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'Timestamp' default: ''

2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning '14F7E965CB8D71AA83C1F3B3CE26B6F7' 2dc 8b0 szTimeStamp: '14F7E965CB8D71AA83C1F3B3CE26B6F7' 2dc 8b0 CSecretKey::CSecretKey 2dc 8b0 szApp: Messenger 2dc 8b0 szUser: mada_l0ve1 2dc 8b0 szTimeStamp: 14F7E965CB8D71AA83C1F3B3CE26B6F7 2dc 8b0 CSecretKey::Init(). 2dc 8b0 m_szAppID: Messenger 2dc 8b0 m_szUserID: mada_l0ve1 2dc 8b0 KeyMatches 'lc9luhmtnwgbo2x94' 2dc 8b0 key comparison test passed... continuing 2dc 8b0 HTTPRedirectHandler::CheckRedirectFile 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 ReadIniFileInt 2dc 8b0 section: [Info] key: 'Dir' default: 0 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 0 2dc 8b0 set m_RType to RedirectTypeSingleFile 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'App' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'Messenger' 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'User' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'mada_l0ve1' 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'Version' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'MSG1.0' 2dc 8b0 ReadIniFileInt 2dc 8b0 section: [Info] key: 'Post' default: 0 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 0 2dc 8b0 m_szINIApp: 'Messenger' 2dc 8b0 m_szINIUser: 'mada_l0ve1' 2dc 8b0 m_szINIVersionString: 'MSG1.0' 2dc 8b0 m_iIsPost: 0 2dc 8b0 ReadIniFileInt 2dc 8b0 section: [Info] key: 'W' default: 0 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg

2dc 8b0 returning 722032 2dc 8b0 m_hWnd: 0xb0470 2dc 8b0 ReadIniFileInt 2dc 8b0 section: [Info] key: 'M' default: 0 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 15 2dc 8b0 m_nMsgNumber: 15 2dc 8b0 exit HTTPRedirectHandler::CheckRedirectFile 2dc 8b0 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 8b0 ReadIniFileString 2dc 8b0 section: [Info] key: 'Name' default: '' 2dc 8b0 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 returning 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 8b0 set m_szFileToTransfer to D:\Poze\diverse\14-09-07_1621.jpg 2dc 8b0 m_bProcessed: 1 [success] 2dc 8b0 exit HTTPRedirectHandler::Process 2dc 8b0 GetRedirInfo(), OutputFileName is D:\Poze\diverse\14-0907_1621.jpg. 2dc 8b0 szOutputFilename is D:\Poze\diverse\14-09-07_1621.jpg. 2dc 8b0 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 8b0 m_cFileName: D:\Poze\diverse\14-09-07_1621.jpg 2dc 8b0 m_hWndReporting: 0xb0470 2dc 8b0 m_nMsgNumber: 15 2dc 8b0 RedirectType: 1 RedirectTypeSingleFile 2dc 8b0 bIsPost: 0 2dc 8b0 m_cFileName: D:\Poze\diverse\14-09-07_1621.jpg 2dc 8b0 m_hWndReporting: 0xb0470 2dc 8b0 m_nMsgNumber: 15 2dc 8b0 RedirectType: 1 RedirectTypeSingleFile 2dc 8b0 calling SendFile D:\Poze\diverse\14-09-07_1621.jpg 2dc 8b0 HTTPRequestHandler::SendFile 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 8b0 GetRegistryInt 'Software\Yahoo\YServer' 'InterimSleep' 0 2dc 8b0 GetRegistryString 'Software\Yahoo\YServer' 'InterimSleep' 2dc 8b0 RegQueryValueExt failed 2 for 'InterimSleep' 2dc 8b0 GetRegistryInt 'Software\Yahoo\YServer' 'ReportingInterval' 0 2dc 8b0 GetRegistryString 'Software\Yahoo\YServer' 'ReportingInterval' 2dc 8b0 RegQueryValueExt failed 2 for 'ReportingInterval' 2dc 8b0 GetRegistryInt 'Software\Yahoo\YServer' 'DontReportByPercent' 0 2dc 8b0 GetRegistryString 'Software\Yahoo\YServer' 'DontReportByPercent' 2dc 8b0 RegQueryValueExt failed 2 for 'DontReportByPercent' 2dc 8b0 SendFile - About to read file D:\Poze\diverse\14-09-07_1621.jpg 2dc 8b0 Opened 'D:\Poze\diverse\14-09-07_1621.jpg' OK 2dc 8b0 set m_lFileLen to 326098 2dc 8b0 HTTPRequestHandler::FormatHeader 2dc 8b0 200 2dc 8b0 OK 2dc 8b0 326098 2dc 8b0 send header: 2dc 8b0 <<<<< 2dc 8b0 HTTP/1.0 200 OK Date: Sat Sep 22 18:10:06 2007 GMT Server: Y!/1.0

MIME-version: 1.0 Content-type: image/jpeg Last-modified: Sat Sep 22 18:10:06 2007 GMT Content-length: 326098 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b0 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4

>>>>> calling send on 1a0: header 185 bytes send returned 185 HTTPFileInfo::HTTPFileInfo D:\Poze\diverse\14-09-07_1621.jpg 326098 Sending file D:\Poze\diverse\14-09-07_1621.jpg PostInfoToApp YSERVER_IPC_BEGIN 326098 0 SendMessage 0xb0470 IPCInfo: cFileName: 'D:\Poze\diverse\14-09-07_1621.jpg' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_BEGIN lFileLen: 326098 lCurrBytes: 0 nMessageNumber: 15 SendMessage processed NewThreadSend Starting GetRegistryInt 'Software\Yahoo\YServer' 'SendTimeout' 0 GetRegistryString 'Software\Yahoo\YServer' 'SendTimeout' RegQueryValueExt failed 2 for 'SendTimeout' CreateThread SendThread_New SendThread_New thread id: 2228 SendThread_New bffdc4 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 4096 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 8192 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 12288 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 16384 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 20480 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 24576 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 28672 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 32768 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 36864 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 40960 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 45056 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 49152 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 53248 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 57344 0 calling send on 0x1a0 4096 bytes

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4

PostInfoToApp YSERVER_IPC_SENDING 61440 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 65536 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 69632 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 73728 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 77824 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 81920 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 86016 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 90112 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 94208 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 98304 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 102400 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 106496 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 110592 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 114688 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 118784 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 122880 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 126976 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 131072 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 135168 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 139264 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 143360 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 147456 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 151552 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 155648 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 159744 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 163840 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 167936 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 172032 0 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 176128 0 calling send on 0x1a0 4096 bytes

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4 8b4

PostInfoToApp YSERVER_IPC_SENDING 180224 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 184320 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 188416 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 192512 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 196608 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 200704 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 204800 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 208896 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 212992 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 217088 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 221184 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 225280 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 229376 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 233472 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 237568 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 241664 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 245760 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 249856 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 253952 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 258048 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 262144 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 266240 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 270336 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 274432 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 278528 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 282624 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 286720 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 290816 calling send on 0x1a0 4096 bytes PostInfoToApp YSERVER_IPC_SENDING 294912 calling send on 0x1a0 4096 bytes

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 299008 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 303104 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 307200 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 311296 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 315392 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 319488 0 2dc 8b4 calling send on 0x1a0 4096 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 323584 0 2dc 8b4 calling send on 0x1a0 2514 bytes 2dc 8b4 PostInfoToApp YSERVER_IPC_SENDING 326098 0 2dc 8b4 leaving SendThread_New 2dc 8b0 SendThread_New succeeded 2dc 8b0 leaving NewThreadSend 2dc 8b0 PostInfoToApp YSERVER_IPC_FINISHED 326098 0 2dc 8b0 SendMessage 0xb0470 2dc 8b0 IPCInfo: 2dc 8b0 cFileName: 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 8b0 cUserID: 'mada_l0ve1' 2dc 8b0 nStatus: 0 2dc 8b0 nType: YSERVER_IPC_FINISHED 2dc 8b0 lFileLen: 326098 2dc 8b0 lCurrBytes: 326098 2dc 8b0 nMessageNumber: 15 2dc 8b0 SendMessage processed 2dc 8b0 sent 326098 bytes of [326098 byte] file: 2dc 8b0 'D:\Poze\diverse\14-09-07_1621.jpg' 2dc 8b0 leaving HTTPRequestHandler::SendFile 2dc 8b0 unlink C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.119047380476514-0907_1621.jpg 2dc 8b0 exit HTTPRequestHandler::SendRedirectedFile 2dc 8b0 leaving HandleFileSend 2dc 8b0 HTTPRequestHandler::~HTTPRequestHandler 2dc 8b0 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 8b0 after calling RemoveHTTPRQH, count = 0. 2dc 8b0 closesocket: 0x1a0 2dc 8b0 HTTPLog::~HTTPLog 2dc 8b0 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 16 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\fhrnj.JPG' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1

2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190474029843fhrnj.JPG?AppID=Messenger&U serID=mada_l0ve1&K=lc9luhmtnc5xreuox2rsgx74tv 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\fhrnj.JPG Version=MSG1.0 2dc 2dc 2dc 2dc

384 384 384 384

wrote Name=C:\Documents and Settings\ianis\Desktop\fhrnj.JPG wrote Version=MSG1.0 writing to ini file:

App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=45E50F299AFADDCCD92080E9F7697A7D 2dc 384 2dc 384 2dc 384

wrote Timestamp=45E50F299AFADDCCD92080E9F7697A7D writing to ini file:

W=722032 M=16 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=16 writing to ini file:

Post=1 2dc 2dc 2dc 2dc

384 wrote Post=1 384 exit CreateShortcutFile 384 CreateShortcutFile succeeded. 384 Entering AllocateAndCopyToWideString

2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190474029843fhrnj.JPG?AppID=Messenger&U serID=mada_l0ve1&K=lc9luhmtnc5xreuox2rsgx74tv 2dc 384 szKey: lc9luhmtnc5xreuox2rsgx74tv 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1586 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray 2dc 2b0 CloseHandle thread 0x190 2dc 978 HandlerThread 0x1a4 2dc 978 HTTPLog::HTTPLog 2dc 978 HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) 2dc 978 home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 978 m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' 2dc 978 about to m_HTTPLog.SetSocket(m_sock) 2dc 978 HTTPLog::SetSocket starting... socket=420 2dc 978 HTTPLog::SetSocket exiting 2dc 978 about to g_RQT.AddHTTPRQH(this), this = 3555216 2dc 978 after calling g_RQT.AddHTTPRQH(this). total count = 1. 2dc 978 about to create Kill Comm Event 2dc 978 leaving HTTPRequestHandler::HTTPRequestHandler 2dc 978 HTTPRequestHandler::ReadRequest 2dc 978 HTTPRequestHandler::ReadRequest 2dc 978 received 1024 bytes 2dc 978 Found '\r\n\r\n' 2dc 978 allocating entity body buffer to store read overflow from header 2dc 978 762 bytes 2dc 978 32 ms elapsed 2dc 978 header is: 2dc 978 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 2dc 978 POST /Messenger.mada_l0ve1.1190474029843fhrnj.JPG?AppID=Messenger&UserID=mada_l0ve1&K=l c9luhmtnc5xreuox2rsgx74tv HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 205262 Cache-Control: no-cache 2dc 978 2dc 978 2dc 978

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x364600 m_dwEntityBodyBufferSize: 16384

2dc 978 m_dwNumBytesInEntityBody: 762 2dc 978 HTTPRequestHandler::ParseRequest 2dc 978 m_cRequest: POST 2dc 978 UnescapeName 2dc 978 DecodeURL 2dc 978 before: Messenger 2dc 978 before: Messenger 2dc 978 after: Messenger 2dc 978 UnescapeName 2dc 978 DecodeURL 2dc 978 before: mada_l0ve1 2dc 978 before: mada_l0ve1 2dc 978 after: mada_l0ve1 2dc 978 UnescapeName 2dc 978 DecodeURL 2dc 978 before: lc9luhmtnc5xreuox2rsgx74tv 2dc 978 before: lc9luhmtnc5xreuox2rsgx74tv 2dc 978 after: lc9luhmtnc5xreuox2rsgx74tv 2dc 978 extracted the filename from the URL. saving to m_cFileName: 2dc 978 '/Messenger.mada_l0ve1.1190474029843fhrnj.JPG' 2dc 978 m_cFileName: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 ProcessYahooRequestParams 2dc 978 DecodeURL 2dc 978 before: Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 ValidateRequest 2dc 978 C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'App' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'Messenger' 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'User' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'mada_l0ve1' 2dc 978 ReadIniFileInt 2dc 978 section: [Info] key: 'Post' default: 0 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 1 2dc 978 ValidateRequest: true 2dc 978 request is a Yahoo request 2dc 978 leaving ParseRequest 2dc 978 HandleFileReceive 2dc 978 file name: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc 978 UnescapeName 2dc 978 DecodeURL 2dc 978 before: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 before: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 after: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 unescaped file name: /Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 HTTPRequestHandler::ReceiveRedirectedFile

2dc 978 HTTPRedirectHandler::HTTPRedirectHandler 2dc 978 GetBaseURL 2dc 978 bAddrContainsPort: 0 2dc 978 set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190474029843fhrnj.JPG?AppID=Messenger& UserID=mada_l0ve1&K=lc9luhmtnc5xreuox2rsgx74tv 2dc 978 HTTPRedirectHandler::Process 2dc 978 ValidateKeys 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'Timestamp' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning '45E50F299AFADDCCD92080E9F7697A7D' 2dc 978 szTimeStamp: '45E50F299AFADDCCD92080E9F7697A7D' 2dc 978 CSecretKey::CSecretKey 2dc 978 szApp: Messenger 2dc 978 szUser: mada_l0ve1 2dc 978 szTimeStamp: 45E50F299AFADDCCD92080E9F7697A7D 2dc 978 CSecretKey::Init(). 2dc 978 m_szAppID: Messenger 2dc 978 m_szUserID: mada_l0ve1 2dc 978 KeyMatches 'lc9luhmtnc5xreuox2rsgx74tv' 2dc 978 key comparison test passed... continuing 2dc 978 HTTPRedirectHandler::CheckRedirectFile 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 ReadIniFileInt 2dc 978 section: [Info] key: 'Dir' default: 0 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 0 2dc 978 set m_RType to RedirectTypeSingleFile 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'App' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'Messenger' 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'User' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'mada_l0ve1' 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'Version' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'MSG1.0' 2dc 978 ReadIniFileInt 2dc 978 section: [Info] key: 'Post' default: 0 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 1 2dc 978 m_szINIApp: 'Messenger' 2dc 978 m_szINIUser: 'mada_l0ve1' 2dc 978 m_szINIVersionString: 'MSG1.0' 2dc 978 m_iIsPost: 1 2dc 978 ReadIniFileInt 2dc 978 section: [Info] key: 'W' default: 0

2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 722032 2dc 978 m_hWnd: 0xb0470 2dc 978 ReadIniFileInt 2dc 978 section: [Info] key: 'M' default: 0 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 16 2dc 978 m_nMsgNumber: 16 2dc 978 exit HTTPRedirectHandler::CheckRedirectFile 2dc 978 HTTPRedirectHandler::HandleRedirectSingleFile 2dc 978 ReadIniFileString 2dc 978 section: [Info] key: 'Name' default: '' 2dc 978 file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474029843fhrnj.JPG 2dc 978 returning 'C:\Documents and Settings\ianis\Desktop\fhrnj.JPG' 2dc 978 set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 978 m_bProcessed: 1 [success] 2dc 978 exit HTTPRedirectHandler::Process 2dc 978 GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\fhrnj.JPG. 2dc 978 szOutputFilename is C:\Documents and Settings\ianis\Desktop\fhrnj.JPG. 2dc 978 HTTPRedirectHandler::~HTTPRedirectHandler 2dc 978 m_cFileName: C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 978 m_hWndReporting: 0xb0470 2dc 978 m_nMsgNumber: 16 2dc 978 RedirectType: 1 RedirectTypeSingleFile 2dc 978 bIsPost: 1 2dc 978 PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc 978 SendMessage 0xb0470 2dc 978 IPCInfo: 2dc 978 cFileName: 'C:\Documents and Settings\ianis\Desktop\fhrnj.JPG' 2dc 978 cUserID: 'mada_l0ve1' 2dc 978 nStatus: 0 2dc 978 nType: YSERVER_IPC_BEGIN 2dc 978 lFileLen: 0 2dc 978 lCurrBytes: 0 2dc 978 nMessageNumber: 16 2dc 978 SendMessage processed 2dc 978 calling ReceiveFile C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 978 ReceiveFile 2dc 978 iContentLength: 205262 2dc 978 ReceiveEntityBody 2dc 978 temp: C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 978 dwBufSize: 16384 2dc 978 dwNumBufBytesUsed: 762 2dc 978 creating file C:\Documents and Settings\ianis\Desktop\fhrnj.JPG 2dc 978 flushed 762 bytes 2dc 978 PostInfoToApp YSERVER_IPC_RECEIVING 762 0 2dc 978 ReadEntityBodyChunk 16384 2dc 978 PostInfoToApp YSERVER_IPC_RECEIVING 17146 0 2dc 978 ReadEntityBodyChunk 16384 2dc 978 PostInfoToApp YSERVER_IPC_RECEIVING 33530 0 2dc 978 ReadEntityBodyChunk 16384 2dc 978 PostInfoToApp YSERVER_IPC_RECEIVING 49914 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 978 2b0 978 978 978 978 978 978 978 978 978 978 978 978 978 978

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 66298 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 82682 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 99066 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115450 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131834 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148218 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164602 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180986 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197370 0 ReadEntityBodyChunk 7892 PostInfoToApp YSERVER_IPC_RECEIVING 205262 0 closing file C:\Documents and Settings\ianis\Desktop\fhrnj.JPG IsFreeEntryInThreadArray PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470 IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\fhrnj.JPG' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 16 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc 978 200 2dc 978 OK 2dc 978 sent: 2dc 978 <<<< 2dc 978 HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106

the file was received 2dc 978 >>>> 2dc 978 leaving HandleFileReceive 2dc 978 HTTPRequestHandler::~HTTPRequestHandler 2dc 978 calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc 978 after calling RemoveHTTPRQH, count = 0. 2dc 978 closesocket: 0x1a4 2dc 978 HTTPLog::~HTTPLog 2dc 978 leaving HandlerThread 2dc 384 CYServerComponent::PostFile 2dc 384 CreateShortcutFileForRequest2dc 384 szFullPathName: C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc 384 szAppID: Messenger 2dc 384 szUserID: mada_l0ve1 2dc 384 szVersion: MSG1.0 2dc 384 nhWnd: 722032 2dc 384 nMsgNumber: 17 2dc 384 CreateShortcutFile 2dc 384 szVersion: 'MSG1.0' 2dc 384 szOriginalFile: 'C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3' 2dc 384 szAppID: 'Messenger' 2dc 384 szUserID: 'mada_l0ve1' 2dc 384 bIsDir: 0 2dc 384 bIsPost: 1 2dc 384 CreateShortcutFileName 2dc 384 shortcut file name: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc 384 CSecretKey::CSecretKey 2dc 384 szApp: Messenger 2dc 384 szUser: mada_l0ve1 2dc 384 CSecretKey::Init(). 2dc 384 m_szAppID: Messenger 2dc 384 m_szUserID: mada_l0ve1 2dc 384 CreateURL 2dc 384 GetBaseURL 2dc 384 bAddrContainsPort: 0 2dc 384 base URL: http://192.168.1.206 2dc 384 CreateURL returned: 2dc 384 http://192.168.1.206/Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Pargh el++Zamorena+%5B+www.fumegatorii.com+%5D.mp3?AppID=Messenger&UserID=mada_l0ve1&K=lc9l uhmtnol04wwl6hp4u8v 2dc 384 WriteShortcutFile 2dc 384 writing to ini file: 2dc 384 [Info] Name=C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel Zamorena [ www.fumegatorii.com ].mp3

Version=MSG1.0 2dc 384 wrote Name=C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc 384 wrote Version=MSG1.0 2dc 384 writing to ini file: 2dc 384 App=Messenger User=mada_l0ve1 2dc 2dc 2dc 2dc

384 384 384 384

wrote App=Messenger wrote User=mada_l0ve1 writing to ini file:

Timestamp=79C0F117B71DD7443CE842500CD2402F 2dc 384 2dc 384 2dc 384

wrote Timestamp=79C0F117B71DD7443CE842500CD2402F writing to ini file:

W=722032 M=17 2dc 2dc 2dc 2dc

384 384 384 384

wrote W=722032 wrote M=17 writing to ini file:

Post=1 2dc 384 wrote Post=1 2dc 384 exit CreateShortcutFile 2dc 384 CreateShortcutFile succeeded. 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 Entering AllocateAndCopyToWideString 2dc 384 Leaving AllocateAndCopyToWideStrign 2dc 384 output: 2dc 384 szURL: http://192.168.1.206/Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Pargh el++Zamorena+%5B+www.fumegatorii.com+%5D.mp3?AppID=Messenger&UserID=mada_l0ve1&K=lc9l uhmtnol04wwl6hp4u8v 2dc 384 szKey: lc9luhmtnol04wwl6hp4u8v 2dc 384 szShortcutFileName: Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc 384 leaving PostFile 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.189 2dc 2b0 port: 1616 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 2b0 2b0 bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReportInitProgress AddHandlerThreadToThreadArray CloseHandle thread 0x18c HandlerThread 0x1a8 HTTPLog::HTTPLog HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=424 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 1024 bytes Found '\r\n\r\n' allocating entity body buffer to store read overflow from header 701 bytes 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

POST /Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3?AppID=Messenger&UserID=mada_l0ve1&K=lc9l uhmtnol04wwl6hp4u8v HTTP/1.1 Referer: madalina User-Agent: Mozilla/4.0 (compatible; MSIE 5.5) Host: 192.168.1.206 Content-Length: 3633653 Cache-Control: no-cache 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x364600 m_dwEntityBodyBufferSize: 16384 m_dwNumBytesInEntityBody: 701 HTTPRequestHandler::ParseRequest m_cRequest: POST UnescapeName DecodeURL before: Messenger before: Messenger after: Messenger UnescapeName DecodeURL before: mada_l0ve1 before: mada_l0ve1 after: mada_l0ve1 UnescapeName DecodeURL before: lc9luhmtnol04wwl6hp4u8v before: lc9luhmtnol04wwl6hp4u8v after: lc9luhmtnol04wwl6hp4u8v extracted the filename from the URL. saving to m_cFileName:

2dc bcc '/Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3' 2dc bcc m_cFileName: /Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3 2dc bcc ProcessYahooRequestParams 2dc bcc DecodeURL 2dc bcc before: Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3 2dc bcc after: Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel Zamorena [ www.fumegatorii.com ].mp3 2dc bcc ValidateRequest 2dc bcc C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'App' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'Messenger' 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'User' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'mada_l0ve1' 2dc bcc ReadIniFileInt 2dc bcc section: [Info] key: 'Post' default: 0 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 1 2dc bcc ValidateRequest: true 2dc bcc request is a Yahoo request 2dc bcc leaving ParseRequest 2dc bcc HandleFileReceive 2dc bcc file name: /Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3 2dc bcc Entering GetUnescapedFullPathFileName, base path is C:\PROGRA~1\Yahoo!\MESSEN~1\data 2dc bcc UnescapeName 2dc bcc DecodeURL 2dc bcc before: /Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3 2dc bcc after: /Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc before: /Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parghel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3 2dc bcc after: /Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel Zamorena [ www.fumegatorii.com ].mp3 2dc bcc unescaped file name: /Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc full file path: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer &

Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc HTTPRequestHandler::ReceiveRedirectedFile 2dc bcc HTTPRedirectHandler::HTTPRedirectHandler 2dc bcc GetBaseURL 2dc bcc bAddrContainsPort: 0 2dc bcc set m_szRawURL to http://192.168.1.206//Messenger.mada_l0ve1.1190474820468Dj+Tom+Boxer+%26+Anca+Parg hel++Zamorena+%5B+www.fumegatorii.com+%5D.mp3?AppID=Messenger&UserID=mada_l0ve1&K=lc9l uhmtnol04wwl6hp4u8v 2dc bcc HTTPRedirectHandler::Process 2dc bcc ValidateKeys 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'Timestamp' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning '79C0F117B71DD7443CE842500CD2402F' 2dc bcc szTimeStamp: '79C0F117B71DD7443CE842500CD2402F' 2dc bcc CSecretKey::CSecretKey 2dc bcc szApp: Messenger 2dc bcc szUser: mada_l0ve1 2dc bcc szTimeStamp: 79C0F117B71DD7443CE842500CD2402F 2dc bcc CSecretKey::Init(). 2dc bcc m_szAppID: Messenger 2dc bcc m_szUserID: mada_l0ve1 2dc bcc KeyMatches 'lc9luhmtnol04wwl6hp4u8v' 2dc bcc key comparison test passed... continuing 2dc bcc HTTPRedirectHandler::CheckRedirectFile 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc ReadIniFileInt 2dc bcc section: [Info] key: 'Dir' default: 0 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 0 2dc bcc set m_RType to RedirectTypeSingleFile 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'App' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'Messenger' 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'User' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'mada_l0ve1' 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'Version' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'MSG1.0' 2dc bcc ReadIniFileInt

2dc bcc section: [Info] key: 'Post' default: 0 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 1 2dc bcc m_szINIApp: 'Messenger' 2dc bcc m_szINIUser: 'mada_l0ve1' 2dc bcc m_szINIVersionString: 'MSG1.0' 2dc bcc m_iIsPost: 1 2dc bcc ReadIniFileInt 2dc bcc section: [Info] key: 'W' default: 0 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 722032 2dc bcc m_hWnd: 0xb0470 2dc bcc ReadIniFileInt 2dc bcc section: [Info] key: 'M' default: 0 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 17 2dc bcc m_nMsgNumber: 17 2dc bcc exit HTTPRedirectHandler::CheckRedirectFile 2dc bcc HTTPRedirectHandler::HandleRedirectSingleFile 2dc bcc ReadIniFileString 2dc bcc section: [Info] key: 'Name' default: '' 2dc bcc file: C:\PROGRA~1\Yahoo!\MESSEN~1\data\Messenger.mada_l0ve1.1190474820468Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc returning 'C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3' 2dc bcc set m_szFileToTransfer to C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc m_bProcessed: 1 [success] 2dc bcc exit HTTPRedirectHandler::Process 2dc bcc GetRedirInfo(), OutputFileName is C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3. 2dc bcc szOutputFilename is C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3. 2dc bcc HTTPRedirectHandler::~HTTPRedirectHandler 2dc bcc m_cFileName: C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 2dc bcc m_hWndReporting: 0xb0470 2dc bcc m_nMsgNumber: 17 2dc bcc RedirectType: 1 RedirectTypeSingleFile 2dc bcc bIsPost: 1 2dc bcc PostInfoToApp YSERVER_IPC_BEGIN 0 0 2dc bcc SendMessage 0xb0470 2dc bcc IPCInfo: 2dc bcc cFileName: 'C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3' 2dc bcc cUserID: 'mada_l0ve1' 2dc bcc nStatus: 0 2dc bcc nType: YSERVER_IPC_BEGIN 2dc bcc lFileLen: 0 2dc bcc lCurrBytes: 0

2dc bcc 2dc bcc 2dc bcc Boxer & 2dc bcc 2dc bcc 2dc bcc 2dc bcc Parghel 2dc bcc 2dc bcc 2dc bcc Parghel 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc 2b0 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc

nMessageNumber: 17 SendMessage processed calling ReceiveFile C:\Documents and Settings\ianis\Desktop\Dj Tom Anca Parghel - Zamorena [ www.fumegatorii.com ].mp3 ReceiveFile iContentLength: 3633653 ReceiveEntityBody temp: C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca - Zamorena [ www.fumegatorii.com ].mp3 dwBufSize: 16384 dwNumBufBytesUsed: 701 creating file C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca - Zamorena [ www.fumegatorii.com ].mp3 flushed 701 bytes PostInfoToApp YSERVER_IPC_RECEIVING 701 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 17085 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 33469 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 49853 0 IsFreeEntryInThreadArray ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 66237 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 82621 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 99005 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 115389 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 131773 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 148157 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 164541 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 180925 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 197309 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 213693 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 230077 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 246461 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 262845 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 279229 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 295613 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 311997 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 328381 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 344765 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

361149 0 377533 0 393917 0 410301 0 426685 0 443069 0 459453 0 475837 0 492221 0 508605 0 524989 0 541373 0 557757 0 574141 0 590525 0 606909 0 623293 0 639677 0 656061 0 672445 0 688829 0 705213 0 721597 0 737981 0 754365 0 770749 0 787133 0 803517 0 819901 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

836285 0 852669 0 869053 0 885437 0 901821 0 918205 0 934589 0 950973 0 967357 0 983741 0 1000125 0 1016509 0 1032893 0 1049277 0 1065661 0 1082045 0 1098429 0 1114813 0 1131197 0 1147581 0 1163965 0 1180349 0 1196733 0 1213117 0 1229501 0 1245885 0 1262269 0 1278653 0 1295037 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

1311421 0 1327805 0 1344189 0 1360573 0 1376957 0 1393341 0 1409725 0 1426109 0 1442493 0 1458877 0 1475261 0 1491645 0 1508029 0 1524413 0 1540797 0 1557181 0 1573565 0 1589949 0 1606333 0 1622717 0 1639101 0 1655485 0 1671869 0 1688253 0 1704637 0 1721021 0 1737405 0 1753789 0 1770173 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

1786557 0 1802941 0 1819325 0 1835709 0 1852093 0 1868477 0 1884861 0 1901245 0 1917629 0 1934013 0 1950397 0 1966781 0 1983165 0 1999549 0 2015933 0 2032317 0 2048701 0 2065085 0 2081469 0 2097853 0 2114237 0 2130621 0 2147005 0 2163389 0 2179773 0 2196157 0 2212541 0 2228925 0 2245309 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

2261693 0 2278077 0 2294461 0 2310845 0 2327229 0 2343613 0 2359997 0 2376381 0 2392765 0 2409149 0 2425533 0 2441917 0 2458301 0 2474685 0 2491069 0 2507453 0 2523837 0 2540221 0 2556605 0 2572989 0 2589373 0 2605757 0 2622141 0 2638525 0 2654909 0 2671293 0 2687677 0 2704061 0 2720445 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING

2736829 0 2753213 0 2769597 0 2785981 0 2802365 0 2818749 0 2835133 0 2851517 0 2867901 0 2884285 0 2900669 0 2917053 0 2933437 0 2949821 0 2966205 0 2982589 0 2998973 0 3015357 0 3031741 0 3048125 0 3064509 0 3080893 0 3097277 0 3113661 0 3130045 0 3146429 0 3162813 0 3179197 0 3195581 0

2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc Parghel 2dc bcc 2dc bcc

ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3211965 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3228349 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3244733 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3261117 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3277501 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3293885 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3310269 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3326653 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3343037 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3359421 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3375805 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3392189 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3408573 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3424957 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3441341 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3457725 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3474109 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3490493 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3506877 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3523261 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3539645 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3556029 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3572413 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3588797 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3605181 0 ReadEntityBodyChunk 16384 PostInfoToApp YSERVER_IPC_RECEIVING 3621565 0 ReadEntityBodyChunk 12088 PostInfoToApp YSERVER_IPC_RECEIVING 3633653 0 closing file C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca - Zamorena [ www.fumegatorii.com ].mp3 PostInfoToApp YSERVER_IPC_FINISHED 0 0 SendMessage 0xb0470

2dc bcc 2dc bcc Parghel 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc 2dc bcc

IPCInfo: cFileName: 'C:\Documents and Settings\ianis\Desktop\Dj Tom Boxer & Anca - Zamorena [ www.fumegatorii.com ].mp3' cUserID: 'mada_l0ve1' nStatus: 0 nType: YSERVER_IPC_FINISHED lFileLen: 0 lCurrBytes: 0 nMessageNumber: 17 SendMessage processed exit HTTPRequestHandler::ReceiveRedirectedFile SendString

the file was received 2dc bcc 200 2dc bcc OK 2dc bcc sent: 2dc bcc <<<< 2dc bcc HTTP/1.0 200 OK Server: Y! Content-Type: text/html Content-Length: 106 the file was received 2dc bcc >>>> 2dc bcc leaving HandleFileReceive 2dc bcc HTTPRequestHandler::~HTTPRequestHandler 2dc bcc calling g_RQT.RemoveHTTPRQH, this = 3555216. 2dc bcc after calling RemoveHTTPRQH, count = 0. 2dc bcc closesocket: 0x1a8 2dc bcc HTTPLog::~HTTPLog 2dc bcc leaving HandlerThread 2dc 2b0 accept connection from: 2dc 2b0 IP addr: 192.168.1.246 2dc 2b0 port: 4040 2dc 2b0 accept socket: 2dc 2b0 IP addr: 192.168.1.206 2dc 2b0 port: 80 2dc 2b0 spawning new Handler thread 2dc 2b0 ReportInitProgress 2dc 2b0 AddHandlerThreadToThreadArray

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

2b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0

CloseHandle thread 0x188 HandlerThread 0x17c HTTPLog::HTTPLog HTTPRequestHandler::HTTPRequestHandler (max incoming = 1024) home directory is C:\PROGRA~1\Yahoo!\MESSEN~1\data m_szHomeDir: 'C:\PROGRA~1\Yahoo!\MESSEN~1\data' about to m_HTTPLog.SetSocket(m_sock) HTTPLog::SetSocket starting... socket=380 HTTPLog::SetSocket exiting about to g_RQT.AddHTTPRQH(this), this = 3555216 after calling g_RQT.AddHTTPRQH(this). total count = 1. about to create Kill Comm Event leaving HTTPRequestHandler::HTTPRequestHandler HTTPRequestHandler::ReadRequest HTTPRequestHandler::ReadRequest received 143 bytes Found '\r\n\r\n' 0 ms elapsed header is: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

OPTIONS / HTTP/1.1 translate: f User-Agent: Microsoft-WebDAV-MiniRedir/5.1.2600 Host: ANDREEA Content-Length: 0 Connection: Keep-Alive 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 9b0 2b0 2b0 384 384 384 384 384 384 384 384 3d0

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> m_pEntityBodyBuffer: 0x0 m_dwEntityBodyBufferSize: 0 m_dwNumBytesInEntityBody: 0 HTTPRequestHandler::ParseRequest m_cRequest: OPTIONS request type not found FigureRequestType failed leaving ParseRequest ParseRequest failed Handler failed HTTPRequestHandler::~HTTPRequestHandler calling g_RQT.RemoveHTTPRQH, this = 3555216. after calling RemoveHTTPRQH, count = 0. closesocket: 0x17c HTTPLog::~HTTPLog leaving HandlerThread IsFreeEntryInThreadArray CloseHandle thread 0x1a4 CYServerComponent::GetDownloadStatus HTTPRQTotals::GetTotals Entering AllocateAndCopyToWideString Leaving AllocateAndCopyToWideStrign Entering AllocateAndCopyToWideString Leaving AllocateAndCopyToWideStrign CYServerComponent::IsServerRunning CYServerComponent::StopServer WaitForMultipleObjects returned 0

2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc 2dc

3d0 3d0 3d0 2b0 2b0 3d0 3d0 3d0 2b0 2b0 2b0 2b0 2b0 3d0 3d0 384 384 384 384 688 384 384

GetExitCodeThread for ListenerThread 0x14c: 0x103 hKillEvent was signalled: need to kill listener thread calling closesocket on listener socket 0x160 accept failed 10004 IsFreeEntryInThreadArray waiting for ListenerThread to complete WaitForSingleObject 0x14c returned 0 ListenerThread completed accept failed 10038 accept returned WSAENOTSOCK: returning AcceptAndHandleRequests failed CloseThreadArray leaving ListenerThread ReportInitProgress leaving ServerThread stopping server leaving CYServerComponent::StopServer Increment reference count for final release CYServerComponent::~CYServerComponent leaving CountdownThread back from message loop leaving WinMain