I dont belive this to be else at all can an admin send me his offenders ip please here is a debug of the exe..
:00410000 00 00 00 00 09 48 40 00 .....H@.
:00410008 45 52 40 00 BB 56 40 00
[email protected]@.
:00410010 A7 62 40 00 3B 73 40 00 .b@.;s@.
:00410018 2A 78 40 00 CA 84 40 00 *x@...@.
:00410020 00 00 00 00 00 00 00 00 ........
:00410028 00 00 00 00 00 00 00 00 ........
:00410030 41 42 43 44 45 46 47 48 ABCDEFGH
:00410038 49 4A 4B 4C 4D 4E 4F 50 Ijust kiddingLMNOP
:00410040 51 52 53 54 55 56 57 58 QRSTUVWX
:00410048 59 5A 61 62 63 64 65 66 YZabcdef
:00410050 67 68 69 6A 6B 6C 6D 6E ghijust kiddinglmn
:00410058 6F 70 71 72 73 74 75 76 opqrstuv
:00410060 77 78 79 7A 30 31 32 33 wxyz0123
:00410068 34 35 36 37 38 39 2B 2F 456789+/
:00410070 00 00 00 00 54 44 46 57 ....TDFW
:00410078 55 60 50 42 31 33 3A 34 U`PB13:4
:00410080 00 00 00 00 77 62 00 00 ....wb..
:00410088 72 62 00 00 00 00 00 00 rb......
:00410090 7C C2 40 00 00 00 00 00 |.@.....
:00410098 2E 3F 41 56 65 78 63 65 .?AVexce
:004100A0 70 74 69 6F 6E 40 40 00 ption@@.
:004100A8 7C C2 40 00 00 00 00 00 |.@.....
:004100B0 2E 3F 41 56 6C 6F 67 69 .?AVlogi
:004100B8 63 5F 65 72 72 6F 72 40 c_error@
:004100C0 73 74 64 40 40 00 00 00 std@@...
:004100C8 7C C2 40 00 00 00 00 00 |.@.....
:004100D0 2E 3F 41 56 6C 65 6E 67 .?AVleng
:004100D8 74 68 5F 65 72 72 6F 72 th_error
:004100E0 40 73 74 64 40 40 00 00 @std@@..
:004100E8 73 74 72 69 6E 67 20 74 string t
:004100F0 6F 6F 20 6C 6F 6E 67 00 oo long.
:004100F8 7C C2 40 00 00 00 00 00 |.@.....
:00410100 2E 3F 41 56 6F 75 74 5F .?AVout_
:00410108 6F 66 5F 72 61 6E 67 65 of_range
:00410110 40 73 74 64 40 40 00 00 @std@@..
:00410118 69 6E 76 61 6C 69 64 20 invalid
:00410120 73 74 72 69 6E 67 20 70 string p
:00410128 6F 73 69 74 69 6F 6E 00 osition.
:00410130 5C 00 00 00 3C 74 72 3E \...<tr>
:00410138 3C 74 64 3E 26 6E 62 73 <td>&nbs
:00410140 70 3B 3C 2F 74 64 3E 3C p;</td><
:00410148 74 64 3E 3C 61 20 68 72 td><a hr
:00410150 65 66 3D 27 25 73 27 3E ef='%s'>
:00410158 25 73 3C 2F 61 3E 3C 2F %s</a></
:00410160 74 64 3E 3C 2F 74 72 3E td></tr>
:00410168 00 00 00 00 3C 74 72 3E ....<tr>
:00410170 3C 74 64 3E 26 6E 62 73 <td>&nbs
:00410178 70 3B 3C 2F 74 64 3E 3C p;</td><
:00410180 74 64 3E 26 6E 62 73 70 td> 
:00410188 3B 3C 2F 74 64 3E 3C 2F ;</td></
:00410190 74 72 3E 3C 74 72 3E 3C tr><tr><
:00410198 74 64 3E 3C 62 3E 25 73 td><b>%s
:004101A0 3C 2F 62 3E 3C 2F 74 64 </b></td
:004101A8 3E 3C 74 64 3E 3C 61 20 ><td><a
:004101B0 68 72 65 66 3D 27 25 73 href='%s
:004101B8 27 3E 25 73 3C 2F 61 3E '>%s</a>
:004101C0 3C 2F 74 64 3E 3C 2F 74 </td></t
:004101C8 72 3E 00 00 3C 75 6E 6B r>..<unk
:004101D0 6E 6F 77 6E 3E 00 00 00 nown>...
:004101D8 49 6E 74 65 72 6E 65 74 Internet
:004101E0 53 68 6F 72 74 63 75 74 Shortcut
:004101E8 00 00 00 00 55 52 4C 00 ....URL.
:004101F0 25 73 5C 25 73 00 00 00 %s\%s...
:004101F8 25 73 5C 2A 2E 2A 00 00 %s\*.*..
:00410200 25 73 5C 2A 2E 75 72 6C %s\*.url
:00410208 00 00 00 00 3C 2F 74 61 ....</ta
:00410210 62 6C 65 3E 3C 2F 48 54 ble></HT
:00410218 4D 4C 3E 20 00 00 00 00 ML> ....
:00410220 3C 48 54 4D 4C 3E 3C 70 <HTML><p
:00410228 3E 26 6E 62 73 70 3C 2F > </
:00410230 70 3E 3C 48 32 3E 49 45 p><H2>IE
:00410238 20 46 61 76 6F 72 69 74 Favorit
:00410240 65 73 3A 3C 2F 48 32 3E es:</H2>
:00410248 3C 74 61 62 6C 65 20 62 <table b
:00410250 6F 72 64 65 72 3D 27 31 order='1
:00410258 27 20 63 65 6C 6C 73 70 ' cellsp
:00410260 61 63 69 6E 67 3D 27 30 acing='0
:00410268 27 20 63 65 6C 6C 70 61 ' cellpa
:00410270 64 64 69 6E 67 3D 27 32 dding='2
:00410278 27 20 62 6F 72 64 65 72 ' border
:00410280 63 6F 6C 6F 72 3D 27 23 color='#
:00410288 30 30 30 30 39 39 27 3E 000099'>
:00410290 3C 74 72 3E 3C 74 64 3E <tr><td>
:00410298 3C 62 3E 46 6F 6C 64 65 <b>Folde
:004102A0 72 3C 2F 62 3E 3C 2F 74 r</b></t
:004102A8 64 3E 3C 74 64 3E 3C 62 d><td><b
:004102B0 3E 49 74 65 6D 3C 2F 62 >Item</b
:004102B8 3E 3C 2F 74 64 3E 3C 2F ></td></
:004102C0 74 72 3E 00 3D 75 62 63 tr>.=ubc
:004102C8 6D 66 21 78 6A 65 75 69 mf!xjeui
:004102D0 3E 28 38 36 26 28 21 63 >(86&(!c
:004102D8 70 73 65 66 73 3E 28 31 psefs>(1
:004102E0 28 21 64 66 6D 6D 74 71 (!dfmmtq
:004102E8 62 64 6A 6F 68 3E 28 31 bdjoh>(1
:004102F0 28 21 64 66 6D 6D 71 62 (!dfmmqb
:004102F8 65 65 6A 6F 68 3E 28 31 eejoh>(1
:00410300 28 21 62 6D 6A 68 6F 3E (!bmjho>
:00410308 28 64 66 6F 75 66 73 28 (dfoufs(
:00410310 3F 0B 3D 75 73 3F 3D 75 ?.=us?=u
:00410318 65 21 62 6D 6A 68 6F 3E e!bmjho>
:00410320 28 64 66 6F 75 66 73 28 (dfoufs(
:00410328 3F 3D 69 73 21 62 6D 6A ?=is!bmj
:00410330 68 6F 3E 28 64 66 6F 75 ho>(dfou
:00410338 66 73 28 21 74 6A 7B 66 fs(!tj{f
:00410340 3E 28 33 28 3F 0B 45 70 >(3(?.Ep
:00410348 64 76 6E 66 6F 75 21 74 dvnfou!t
:00410350 66 6F 75 21 63 7A 21 3D fou!cz!=
:00410358 62 21 69 73 66 67 3E 28 b!isfg>(
:00410360 69 75 75 71 3B 30 30 78 iuuq;00x
:00410368 78 78 2F 74 70 67 75 2E xx/tpgu.
:00410370 64 66 6F 75 73 62 6D 2F dfousbm/
:00410378 6F 66 75 30 6C 66 7A 6D ofu0lfzm
:00410380 70 68 2F 71 69 71 28 3F ph/qiq(?
:00410388 54 44 2E 4C 66 7A 4D 70 TD.LfzMp
:00410390 68 3D 30 62 3F 2D 0B 21 h=0b?-.!
:00410398 70 67 67 66 73 66 65 21 pggfsfe!
:004103A0 63 7A 21 54 70 67 75 2E cz!Tpgu.
:004103A8 44 66 6F 75 73 62 6D 3D Dfousbm=
:004103B0 63 73 3F 0B 57 6A 74 6A cs?.Wjtj
:004103B8 75 21 54 70 67 75 44 66 u!TpguDf
:004103C0 6F 75 73 62 6D 21 70 6F ousbm!po
:004103C8 21 75 69 66 21 78 66 63 !uif!xfc
:004103D0 3B 21 3D 62 21 69 73 66 ;!=b!isf
:004103D8 67 3E 28 69 75 75 71 3B g>(iuuq;
:004103E0 30 30 78 78 78 2F 74 70 00xxx/tp
:004103E8 67 75 2E 64 66 6F 75 73 gu.dfous
:004103F0 62 6D 2F 6F 66 75 28 3F bm/ofu(?
:004103F8 0B 69 75 75 71 3B 30 30 .iuuq;00
:00410400 78 78 78 2F 74 70 67 75 xxx/tpgu
:00410408 2E 64 66 6F 75 73 62 6D .dfousbm
:00410410 2F 6F 66 75 3D 30 62 3F /ofu=0b?
:00410418 3D 69 73 21 62 6D 6A 68 =is!bmjh
:00410420 6F 3E 28 64 66 6F 75 66 o>(dfouf
:00410428 73 28 21 74 6A 7B 66 3E s(!tj{f>
:00410430 28 33 28 3F 3D 30 75 65 (3(?=0ue
:00410438 3F 3D 30 75 73 3F 3D 30 ?=0us?=0
:00410440 75 62 63 6D 66 3F 3D 30 ubcmf?=0
:00410448 43 50 45 5A 3F 3D 30 49 CPEZ?=0I
:00410450 55 4E 4D 3F 00 00 00 00 UNM?....
:00410458 3C 70 3E 26 6E 62 73 70 <p> 
:00410460 3B 3C 2F 70 3E 00 00 00 ;</p>...
:00410468 3C 2F 66 6F 6E 74 3E 3C </font><
:00410470 2F 48 31 3E 3C 2F 74 64 /H1></td
:00410478 3E 3C 2F 74 72 3E 3C 2F ></tr></
:00410480 74 61 62 6C 65 3E 3C 70 table><p
:00410488 3E 26 6E 62 73 70 3B 3C > <
:00410490 2F 70 3E 0D 0A 00 00 00 /p>.....
:00410498 3C 62 72 3E 3C 74 61 62 <br><tab
:004104A0 6C 65 20 61 6C 69 67 6E le align
:004104A8 3D 27 63 65 6E 74 65 72 ='center
:004104B0 27 20 62 6F 72 64 65 72 ' border
:004104B8 3D 27 30 27 20 77 69 64 ='0' wid
:004104C0 74 68 3D 27 31 30 30 25 th='100%
:004104C8 27 20 63 65 6C 6C 70 61 ' cellpa
:004104D0 64 64 69 6E 67 3D 27 38 dding='8
:004104D8 27 20 63 65 6C 6C 73 70 ' cellsp
:004104E0 61 63 69 6E 67 3D 27 30 acing='0
:004104E8 27 3E 0D 0A 3C 74 72 3E '>..<tr>
:004104F0 3C 74 64 20 61 6C 69 67 <td alig
:004104F8 6E 3D 27 63 65 6E 74 65 n='cente
:00410500 72 27 20 62 67 63 6F 6C r' bgcol
:00410508 6F 72 3D 27 23 30 30 30 or='#000
:00410510 30 39 39 27 20 76 61 6C 099' val
:00410518 69 67 6E 3D 27 6D 69 64 ign='mid
:00410520 64 6C 65 27 3E 3C 48 31 dle'><H1
:00410528 3E 3C 66 6F 6E 74 20 63 ><font c
:00410530 6F 6C 6F 72 3D 27 23 43 olor='#C
:00410538 43 43 43 43 43 27 3E 0D CCCCC'>.
:00410540 0A 00 00 00 3C 2F 54 49 ....</TI
:00410548 54 4C 45 3E 3C 2F 48 45 TLE></HE
:00410550 41 44 3E 3C 42 4F 44 59 AD><BODY
:00410558 3E 0D 0A 00 3C 48 54 4D >...<HTM
:00410560 4C 3E 3C 48 45 41 44 3E L><HEAD>
:00410568 3C 54 49 54 4C 45 3E 00 <TITLE>.
:00410570 61 00 00 00 00 00 00 00 a.......
:00410578 7C C2 40 00 00 00 00 00 |.@.....
:00410580 2E 4A 00 00 25 73 5C 25 .J..%s\%
:00410588 73 2E 64 6C 6C 00 00 00 s.dll...
:00410590 61 62 00 00 25 73 5C 25 ab..%s\%
:00410598 73 2E 65 78 65 00 00 00 s.exe...
:004105A0 57 4C 45 55 6E 6C 6F 63 WLEUnloc
:004105A8 6B 00 00 00 57 4C 45 53 k...WLES
:004105B0 74 6F 70 53 63 72 65 65 topScree
:004105B8 6E 53 61 76 65 72 00 00 nSaver..
:004105C0 57 4C 45 53 74 61 72 74 WLEStart
:004105C8 75 70 00 00 57 4C 45 53 up..WLES
:004105D0 74 61 72 74 53 63 72 65 tartScre
:004105D8 65 6E 53 61 76 65 72 00 enSaver.
:004105E0 57 4C 45 53 68 75 74 64 WLEShutd
:004105E8 6F 77 6E 00 57 4C 45 4C own.WLEL
:004105F0 6F 67 6F 6E 00 00 00 00 ogon....
:004105F8 57 4C 45 4C 6F 63 6B 00 WLELock.
:00410600 57 4C 45 4C 6F 67 6F 66 WLELogof
:00410608 66 00 00 00 55 6E 6C 6F f...Unlo
:00410610 63 6B 00 00 53 74 6F 70 ck..Stop
:00410618 53 63 72 65 65 6E 53 61 ScreenSa
:00410620 76 65 72 00 53 74 61 72 ver.Star
:00410628 74 75 70 00 53 74 61 72 tup.Star
:00410630 74 53 63 72 65 65 6E 53 tScreenS
:00410638 61 76 65 72 00 00 00 00 aver....
:00410640 53 68 75 74 64 6F 77 6E Shutdown
:00410648 00 00 00 00 4C 6F 67 6F ....Logo
:00410650 6E 00 00 00 4C 6F 67 6F n...Logo
:00410658 66 66 00 00 4C 6F 63 6B ff..Lock
:00410660 00 00 00 00 49 6D 70 65 ....I'mpe
:00410668 72 73 6F 6E 61 74 65 00 rsonate.
:00410670 41 73 79 6E 63 68 72 6F Asynchro
:00410678 6E 6F 75 73 00 00 00 00 nous....
:00410680 44 6C 6C 4E 61 6D 65 00 DllName.
:00410688 4E 6F 74 69 66 79 00 00 Notify..
:00410690 52 75 6E 00 52 75 6E 53 Run.RunS
:00410698 65 72 76 69 63 65 73 00 ervices.
:004106A0 53 6F 66 74 77 61 72 65 Software
:004106A8 5C 4D 69 63 72 6F 73 6F \Microso
:004106B0 66 74 5C 57 69 6E 64 6F ft\Windo
:004106B8 77 73 5C 43 75 72 72 65 ws\Curre
:004106C0 6E 74 56 65 72 73 69 6F ntVersio
:004106C8 6E 5C 25 73 00 00 00 00 n\%s....
:004106D0 25 73 2E 64 6C 6C 00 00 %s.dll..
:004106D8 2D 72 00 00 77 00 00 00 -r..w...
:004106E0 53 65 65 20 61 74 74 61 See atta
:004106E8 63 68 65 64 20 66 69 6C ched fil
:004106F0 65 28 73 29 2E 2E 2E 00 e(s)....
:004106F8 25 73 20 6C 6F 67 20 72 %s log r
:00410700 65 70 6F 72 74 00 00 00 eport...
:00410708 2A 2E 2A 00 4C 6F 67 20 *.*.Log
:00410710 72 65 70 6F 72 74 20 6F report o
:00410718 66 20 63 6F 6D 70 75 74 f comput
:00410720 65 72 20 25 73 20 28 25 er %s (%
:00410728 73 29 00 00 45 2D 4D 41 s)..E-MA
:00410730 49 4C 00 00 4C 6F 67 20 IL..Log
:00410738 66 69 6C 65 20 73 65 6E file sen
:00410740 74 20 62 79 20 65 2D 6D t by e-m
:00410748 61 69 6C 00 44 65 6C 65 ail.Dele
:00410750 74 65 20 6C 6F 67 66 69 te logfi
:00410758 6C 65 20 66 61 69 6C 65 le faile
:00410760 64 00 00 00 4D 41 49 4C d...MAIL
:00410768 45 52 52 4F 52 00 00 00 ERROR...
:00410770 49 45 5F 46 61 76 6F 72 IE_Favor
:00410778 69 74 65 73 2E 68 74 6D ites.htm
:00410780 6C 00 00 00 69 65 66 5F l...ief_
:00410788 00 00 00 00 45 52 52 4F ....ERRO
:00410790 52 00 00 00 55 6E 61 62 R...Unab
:00410798 6C 65 20 74 6F 20 6F 70 le to op
:004107A0 65 6E 20 6C 6F 67 66 69 en logfi
:004107A8 6C 65 20 77 68 69 6C 65 le while
:004107B0 20 73 65 6E 64 69 6E 67 sending
:004107B8 20 65 2D 6D 61 69 6C 00 e-mail.
:004107C0 4C 6F 67 46 69 6C 65 2E LogFile.
:004107C8 6C 6F 67 00 25 73 5C 25 log.%s\%
:004107D0 64 2D 25 64 00 00 00 00 d-%d....
:004107D8 32 35 00 00 00 00 00 00 25......
:004107E0 7C C2 40 00 00 00 00 00 |.@.....
:004107E8 2E 48 00 00 52 65 67 69 .H..Regi
:004107F0 73 74 65 72 53 65 72 76 sterServ
:004107F8 69 63 65 50 72 6F 63 65 iceProce
:00410800 73 73 00 00 6B 65 72 6E ss..kern
:00410808 65 6C 33 32 2E 64 6C 6C el32.dll
:00410810 00 00 00 00 46 6C 75 73 ....Flus
:00410818 68 42 75 66 66 65 72 00 hBuffer.
:00410820 53 65 74 4C 4F 70 74 00 SetLOpt.
:00410828 53 61 76 65 45 00 00 00 SaveE...
:00410830 53 74 61 72 74 4C 00 00 StartL..
:00410838 53 74 6F 70 4C 00 00 00 StopL...
:00410840 25 73 5C 25 73 2E 6C 65 %s\%s.le
:00410848 00 00 00 00 25 73 5C 25 ....%s\%
:00410850 73 2E 64 61 74 00 00 00 s.dat...
:00410858 49 6E 73 74 61 6C 6C 61 Installa
:00410860 74 69 6F 6E 20 72 65 70 tion rep
:00410868 6F 72 74 00 55 6E 61 62 ort.Unab
:00410870 6C 65 20 74 6F 20 73 74 le to st
:00410878 61 72 74 20 25 73 20 65 art %s e
:00410880 6E 67 69 6E 65 00 00 00 ngine...
:00410888 45 6E 61 62 6C 65 20 61 Enable a
:00410890 75 74 6F 73 74 61 72 74 utostart
:00410898 75 70 20 66 61 69 6C 65 up faile
:004108A0 64 2E 20 54 68 65 20 25 d. The %
:004108A8 73 20 65 6E 67 69 6E 65 s engine
:004108B0 20 77 69 6C 6C 20 6E 6F will no
:004108B8 74 20 62 65 20 73 74 61 t be sta
:004108C0 72 74 65 64 20 61 75 74 rted aut
:004108C8 6F 6D 61 74 69 63 61 6C omatical
:004108D0 6C 79 20 62 79 20 57 69 ly by Wi
:004108D8 6E 64 6F 77 73 20 61 66 ndows af
:004108E0 74 65 72 20 61 20 72 65 ter a re
:004108E8 62 6F 6F 74 20 28 25 75 boot (%u
:004108F0 29 00 00 00 55 6E 61 62 )...Unab
:004108F8 6C 65 20 74 6F 20 63 72 le to cr
:00410900 65 61 74 65 20 6C 69 6E eate lin
:00410908 6B 20 66 69 6C 65 2E 20 k file.
:00410910 25 73 20 6D 69 67 68 74 %s might
:00410918 20 62 65 20 69 6E 73 74 be inst
:00410920 61 6C 6C 65 64 20 61 6C alled al
:00410928 72 65 61 64 79 00 00 00 ready...
:00410930 55 6E 61 62 6C 65 20 74 Unable t
:00410938 6F 20 63 72 65 61 74 65 o create
:00410940 20 65 6E 67 69 6E 65 20 engine
:00410948 66 69 6C 65 2E 20 25 73 file. %s
:00410950 20 6D 69 67 68 74 20 62 might b
:00410958 65 20 69 6E 73 74 61 6C e instal
:00410960 6C 65 64 20 61 6C 72 65 led alre
:00410968 61 64 79 00 25 73 20 69 ady.%s I
:00410970 73 20 61 6C 72 65 61 64 s alread
:00410978 79 20 72 75 6E 6E 69 6E y runnin
:00410980 67 20 6F 6E 20 74 68 69 g on thi
:00410988 73 20 68 6F 73 74 2C 20 s host,
:00410990 69 6E 73 74 61 6C 6C 61 installa
:00410998 74 69 6F 6E 20 61 62 6F tion abo
:004109A0 72 74 65 64 2E 00 00 00 rted....
:004109A8 4F 6E 65 20 6F 72 20 6D One or m
:004109B0 6F 72 65 20 65 72 72 6F ore erro
:004109B8 72 73 20 77 68 65 72 65 rs where
:004109C0 20 65 6E 63 6F 75 6E 74 encount
:004109C8 65 72 65 64 20 77 68 69 ered whi
:004109D0 6C 65 20 69 6E 73 74 61 le insta
:004109D8 6C 6C 69 6E 67 20 74 68 lling th
:004109E0 65 20 25 73 20 65 6E 67 e %s eng
:004109E8 69 6E 65 3A 3C 62 72 3E ine:<br>
:004109F0 0D 0A 3C 62 72 3E 0D 0A ..<br>..
:004109F8 2A 20 00 00 3C 70 3E 59 * ..<p>Y
:00410A00 6F 75 20 77 69 6C 6C 20 ou will
:00410A08 72 65 63 65 69 76 65 20 receive
:00410A10 61 20 6C 6F 67 20 72 65 a log re
:00410A18 70 6F 72 74 20 65 76 65 port eve
:00410A20 72 79 20 25 64 20 64 61 ry %d the
:00410A28 79 73 2C 20 25 64 20 68 ys, %d h
:00410A30 6F 75 72 73 20 61 6E 64 ours and
:00410A38 20 25 64 20 6D 69 6E 75 %d minu
:00410A40 74 65 73 20 66 72 6F 6D tes from
:00410A48 20 74 68 69 73 20 68 6F this ho
:00410A50 73 74 2E 20 54 68 61 6E st. Than
:00410A58 6B 20 79 6F 75 20 66 6F k you fo
:00410A60 72 20 75 73 69 6E 67 20 r using
:00410A68 25 73 21 3C 2F 70 3E 00 %s!</p>.
:00410A70 66 61 69 6C 65 64 00 00 failed..
:00410A78 73 75 63 63 65 65 64 65 succeede
:00410A80 64 00 00 00 49 6E 73 74 d...Inst
:00410A88 61 6C 6C 61 74 69 6F 6E allation
:00410A90 20 6F 66 20 25 73 20 6F of %s o
:00410A98 6E 20 68 6F 73 74 20 25 n host %
:00410AA0 73 20 28 25 73 29 20 00 s (%s) .
:00410AA8 54 44 2E 4C 66 7A 4D 70 TD.LfzMp
:00410AB0 68 00 00 00 25 64 2E 25 h...%d.%
:00410AB8 64 2E 25 64 2E 25 64 00 d.%d.%d.
:00410AC0 3F 00 00 00 40 00 00 00 ?...@...
:00410AC8 25 61 2C 20 25 64 20 25 %a, %d %
:00410AD0 62 20 25 79 20 25 48 3A b %y %H:
:00410AD8 25 4D 3A 25 53 20 25 5A %M:%S %Z
:00410AE0 0D 0A 00 00 44 61 74 65 ....Date
:00410AE8 3A 20 00 00 0D 0A 00 00 : ......
:00410AF0 20 00 00 00 43 43 3A 20 ...CC:
:00410AF8 00 00 00 00 46 72 6F 6D ....From
:00410B00 3A 20 25 73 20 3C 25 73 : %s <%s
:00410B08 3E 0D 0A 54 6F 3A 20 25 >..To: %
:00410B10 73 0D 0A 52 65 70 6C 79 s..Reply
:00410B18 2D 54 6F 3A 20 25 73 20 -To: %s
:00410B20 3C 25 73 3E 0D 0A 53 75 <%s>..Su
:00410B28 62 6A 65 63 74 3A 20 25 bject: %
:00410B30 73 0D 0A 58 2D 4D 61 69 s..X-Mai
:00410B38 6C 65 72 3A 20 47 65 6E ler: Gen
:00410B40 65 72 69 63 20 4D 61 69 eric Mai
:00410B48 6C 20 73 65 72 76 69 63 l servic
:00410B50 65 0D 0A 4D 49 4D 45 2D e..Mi'mE-
:00410B58 56 65 72 73 69 6F 6E 3A Version:
:00410B60 20 31 2E 30 0D 0A 00 00 1.0....
:00410B68 0D 0A 2E 0D 0A 00 00 00 ........
:00410B70 0D 0A 0D 0A 2D 2D 25 73 ....--%s
:00410B78 2D 2D 0D 0A 0D 0A 00 00 --......
:00410B80 74 65 78 74 2F 68 74 6D text/htm
:00410B88 6C 00 00 00 74 65 78 74 l...text
:00410B90 2F 70 6C 61 69 6E 00 00 /plain..
:00410B98 43 6F 6E 74 65 6E 74 2D Content-
:00410BA0 54 79 70 65 3A 20 6D 75 Type: mu
:00410BA8 6C 74 69 70 61 72 74 2F ltipart/
:00410BB0 6D 69 78 65 64 3B 0D 0A mixed;..
:00410BB8 09 62 6F 75 6E 64 61 72 .boundar
:00410BC0 79 3D 22 25 73 22 0D 0A y="%s"..
:00410BC8 0D 0A 54 68 69 73 20 6D ..This m
:00410BD0 65 73 73 61 67 65 20 69 essage I
:00410BD8 73 20 69 6E 20 4D 49 4D s in Mi'm
:00410BE0 45 20 66 6F 72 6D 61 74 E format
:00410BE8 2E 0D 0A 0D 0A 2D 2D 25 .....--%
:00410BF0 73 0D 0A 43 6F 6E 74 65 s..Conte
:00410BF8 6E 74 2D 54 79 70 65 3A nt-Type:
:00410C00 20 6D 75 6C 74 69 70 61 multipa
:00410C08 72 74 2F 61 6C 74 65 72 rt/alter
:00410C10 6E 61 74 69 76 65 3B 0D native;.
:00410C18 0A 09 62 6F 75 6E 64 61 ..bounda
:00410C20 72 79 3D 22 25 73 22 00 ry="%s".
:00410C28 2D 2D 2D 2D 5F 3D 5F 4E ----_=_N
:00410C30 65 78 74 50 61 72 74 5F extPart_
:00410C38 30 30 30 5F 30 31 43 31 000_01C1
:00410C40 39 39 32 30 2E 38 33 30 9920.830
:00410C48 33 32 42 43 30 00 00 00 32BC0...
:00410C50 2D 2D 2D 2D 5F 3D 5F 4E ----_=_N
:00410C58 65 78 74 50 61 72 74 5F extPart_
:00410C60 30 30 31 5F 30 31 43 31 001_01C1
:00410C68 39 39 32 30 2E 38 33 30 9920.830
:00410C70 33 32 42 43 30 00 00 00 32BC0...
:00410C78 44 41 54 41 0D 0A 00 00 DATA....
:00410C80 48 45 4C 4F 20 25 73 0D HELO %s.
:00410C88 0A 00 00 00 45 48 4C 4F ....EHLO
:00410C90 20 25 73 0D 0A 00 00 00 %s.....
:00410C98 77 77 77 2E 67 6F 6F 67 www.goog
:00410CA0 6C 65 2E 63 6F 6D 00 00 le.com..
:00410CA8 71 75 61 6C 69 66 69 65 qualifie
:00410CB0 64 00 00 00 35 30 31 00 d...501.
:00410CB8 52 43 50 54 20 54 4F 3A RCPT TO:
:00410CC0 3C 25 73 3E 0D 0A 00 00 <%s>....
:00410CC8 4D 41 49 4C 20 46 52 4F MAIL FRO
:00410CD0 4D 3A 3C 25 73 3E 0D 0A M:<%s>..
:00410CD8 00 00 00 00 51 55 49 54 ....QUIT
:00410CE0 0D 0A 00 00 34 32 31 00 ....421.
:00410CE8 25 73 20 2D 20 54 68 65 %s - The
:00410CF0 20 73 65 72 76 65 72 20 server
:00410CF8 72 65 73 70 6F 6E 64 65 responde
:00410D00 64 3A 20 25 73 00 00 00 d: %s...
:00410D08 55 6E 61 62 6C 65 20 74 Unable t
:00410D10 6F 20 73 65 6E 64 20 64 o send d
:00410D18 6F 63 75 6D 65 6E 74 2E ocument.
:00410D20 20 56 65 72 69 66 79 20 Verify
:00410D28 79 6F 75 72 20 73 65 74 your set
:00410D30 74 69 6E 67 73 00 00 00 tings...
:00410D38 55 6E 61 62 6C 65 20 74 Unable t
:00410D40 6F 20 72 65 73 6F 6C 76 o resolv
:00410D48 65 20 73 65 72 76 65 72 e server
:00410D50 00 00 00 00 55 6E 61 62 ....Unab
:00410D58 6C 65 20 74 6F 20 63 6F le to co
:00410D60 6E 6E 65 63 74 20 74 6F nnect to
:00410D68 20 73 65 72 76 65 72 00 server.
:00410D70 55 6E 61 62 6C 65 20 74 Unable t
:00410D78 6F 20 73 65 6E 64 20 64 o send d
:00410D80 6F 63 75 6D 65 6E 74 20 ocument
:00410D88 28 53 4D 54 50 20 63 6F (SMTP co
:00410D90 6D 6D 75 6E 69 63 61 74 mmunicat
:00410D98 69 6F 6E 20 65 72 72 6F ion erro
:00410DA0 72 29 00 00 4F 6E 65 20 r)..One
:00410DA8 6F 72 20 6D 6F 72 65 20 or more
:00410DB0 72 65 63 69 70 69 65 6E recipien
:00410DB8 74 73 20 63 6F 75 6C 64 ts could
:00410DC0 20 6E 6F 74 20 62 65 20 not be
:00410DC8 72 65 61 63 68 65 64 3A reached:
:00410DD0 00 00 00 00 55 6E 61 62 ....Unab
:00410DD8 6C 65 20 74 6F 20 73 65 le to se
:00410DE0 6E 64 20 64 6F 63 75 6D nd docum
:00410DE8 65 6E 74 20 28 6E 65 74 ent (net
:00410DF0 77 6F 72 6B 20 65 72 72 work err
:00410DF8 6F 72 29 00 0D 0A 0D 0A or).....
:00410E00 2D 2D 25 73 0D 0A 43 6F --%s..Co
:00410E08 6E 74 65 6E 74 2D 54 79 ntent-Ty
:00410E10 70 65 3A 20 25 73 3B 0D pe: %s;.
:00410E18 0A 09 63 68 61 72 73 65 ..charse
:00410E20 74 3D 22 69 73 6F 2D 38 t="iso-8
:00410E28 38 35 39 2D 31 22 0D 0A 859-1"..
:00410E30 0D 0A 00 00 0D 0A 0D 0A ........
:00410E38 2D 2D 25 73 0D 0A 43 6F --%s..Co
:00410E40 6E 74 65 6E 74 2D 54 79 ntent-Ty
:00410E48 70 65 3A 20 61 70 70 6C pe: appl
:00410E50 69 63 61 74 69 6F 6E 2F ication/
:00410E58 6F 63 74 65 74 2D 73 74 octet-st
:00410E60 72 65 61 6D 3B 0D 0A 09 ream;...
:00410E68 6E 61 6D 65 3D 22 25 73 name="%s
:00410E70 22 0D 0A 43 6F 6E 74 65 "..Conte
:00410E78 6E 74 2D 54 72 61 6E 73 nt-Trans
:00410E80 66 65 72 2D 45 6E 63 6F fer-Enco
:00410E88 64 69 6E 67 3A 20 62 61 ding: ba
:00410E90 73 65 36 34 0D 0A 43 6F se64..Co
:00410E98 6E 74 65 6E 74 2D 44 69 ntent-Di
:00410EA0 73 70 6F 73 69 74 69 6F spositio
:00410EA8 6E 3A 20 61 74 74 61 63 n: attac
:00410EB0 68 6D 65 6E 74 3B 0D 0A hment;..
:00410EB8 09 66 69 6C 65 6E 61 6D .filenam
:00410EC0 65 3D 22 25 73 22 0D 0A e="%s"..
:00410EC8 0D 0A 00 00 00 00 00 00 ........
:00410ED0 7C C2 40 00 00 00 00 00 |.@.....
:00410ED8 2E 3F 41 56 74 79 70 65 .?AVtype
:00410EE0 5F 69 6E 66 6F 40 40 00 _info@@.
:00410EE8 00 00 00 00 00 00 00 00 ........
:00410EF0 01 00 00 00 00 00 00 00 ........
:00410EF8 00 00 00 00 00 00 00 00 ........
:00410F00 00 00 00 00 00 00 00 00 ........
:00410F08 00 00 00 00 00 00 00 00 ........
:00410F10 00 00 00 00 00 00 00 00 ........
:00410F18 00 00 00 00 00 00 00 00 ........
:00410F20 00 00 00 00 00 00 00 00 ........
:00410F28 00 00 00 00 00 00 00 00 ........
:00410F30 00 00 00 00 00 00 00 00 ........
:00410F38 00 00 00 00 00 00 00 00 ........
:00410F40 00 00 00 00 00 00 00 00 ........
:00410F48 00 00 00 00 00 00 00 00 ........
:00410F50 00 00 00 00 00 00 00 00 ........
:00410F58 00 00 00 00 00 00 00 00 ........
:00410F60 00 00 00 00 00 00 00 00 ........
:00410F68 00 00 00 00 00 00 00 00 ........
:00410F70 00 00 00 00 00 00 00 00 ........
:00410F78 00 00 00 00 00 00 00 00 ........
:00410F80 00 00 00 00 00 00 00 00 ........
:00410F88 00 00 00 00 00 00 00 00 ........
:00410F90 00 00 00 00 00 00 00 00 ........
:00410F98 00 00 00 00 00 00 00 00 ........
:00410FA0 00 00 00 00 00 00 00 00 ........
:00410FA8 00 00 00 00 00 00 00 00 ........
:00410FB0 00 00 00 00 00 00 00 00 ........
:00410FB8 00 00 00 00 00 00 00 00 ........
:00410FC0 00 00 00 00 00 00 00 00 ........
:00410FC8 00 00 00 00 00 00 00 00 ........
:00410FD0 00 00 00 00 00 00 00 00 ........
:00410FD8 00 00 00 00 00 00 00 00 ........
:00410FE0 00 00 00 00 00 00 00 00 ........
:00410FE8 00 00 00 00 00 00 00 00 ........
:00410FF0 00 00 00 00 00 00 00 00 ........
:00410FF8 00 00 00 00 00 00 00 00 ........
the problem is this......
the email adress is saves as a string and unfortually this cannot be seen with my hex editor the only way to do this would be to iinfect a pc and do a packet scan to see where it gos
Edited by Socom, 24 August 2004 - 04:54 AM.