[icq-devel] ( v5 ) ICQ SPY YOU.



Alexander Vaga iron at adamant.com.ua
Thu Sep 20 16:34:35 CEST 2001


Hello ALL,

I sniffed win9x-ICQ99a-client during it registered a new user.
I found a few interesting things.

CMD_REG_NEW_USER  03FCh (1020)
2 bytes    xx xx          PASS_LENGTH   Length of password.
variable   xx ... 00      PASS          A password you want to use for the new account.
19 bytes   xx ... xx      ???
2 bytes    xx xx          FirstInstallKey_LENGTH
variable   xx ... 00      FirstInstallKey
see your own registry
(HKEY_CURRENT_USER\
  Software\
    Mirabilis\
      ICQ\
        DefaultPrefs\
          FirstInstallKey)

1 byte     xx             NUM_UINs      Number of UINs already registered in YOUR computer!
4 bytes    xx xx xx xx    UIN_1         1st UIN registered in YOUR computer!
... ... ... ...
4 bytes    xx xx xx xx    UIN_n         Last UIN registered in YOUR computer!

DOES ICQ SPY US?

Best regards,
    Alexander Vaga





More information about the icq-devel mailing list