MD5: 561cc6d1d90e58dd864329375f3f7726
SHA1: 54984d0fd883b885dba462a6a7d86db0a7721c42
SHA256: a3ade16637890542a9e5169f0c73bb7c3ca24677ee6414a1b33bb99f591c0935
SSDeep: 49152:ru5s8yKHJ49AENn4o56 Bp496CmOgKA4J s8KuqGaX0ToIBAUZLYJd:Mi7jzfxVKUJBAUZLY
Size: 1757184 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: V-9.1HD
Created at: 2014-03-09 11:01:29
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:468

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:468 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\button_111[1].gif (885 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\core[1].php (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\list_icon3[1].png (1291 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\getimage[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX19.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer[1].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\basic[1].css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\list_icon2[1].png (1276 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\DD_belatedPNG[1].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX8.tmp (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\footer_img2[1].png (814 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery[1].js (2456 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\logo[1].png (5583 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX10.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX15.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\denglu_anniu2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snav_icon7[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\button_111[1].gif (1321 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1E.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snav_icon11[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\domain_zcbg[1].jpg (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\bottom_line[1].png (949 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\list_icon4[1].png (1265 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header[1].css (594 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\list_icon1[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fdj[2].png (801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\list_icon2[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX7.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\diy_img[1].gif (2370 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXE.tmp (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\t_bg3[1].png (748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX11.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\t_bg4[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\jquery.imgScroll[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav_bg[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (2363 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1F.tmp (949 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\1005_s[1].jpg (3849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snav_icon1[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1006_s[1].jpg (3221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\3vidc[1].htm (999 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXF.tmp (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1B.tmp (957 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX2.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1004_s[1].jpg (5458 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\button_111[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXC.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1008_s[1].jpg (3578 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\t_bg2[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1A.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\domaincheck[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX9.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\jquery.imgScroll1[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\sosuo_bg[1].png (1587 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\index_login[1].htm (726 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXB.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX13.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snav_icon9[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\icon6[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX4.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\host_deposit_img[1].png (6246 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\footer_img3[1].png (1581 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\list_icon4[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\style[1].css (1766 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\footer_line1[1].png (957 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav_hover[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\sosuo_bg[1].png (2353 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ltitle1[1].png (756 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\daili[1].jpg (4405 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\jquery.slide-zool[1].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snav_icon5[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\list_icon1[1].png (1231 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ltitle1[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\denglu_anniu1[1].png (716 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tophot[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer_line1[1].png (957 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX16.tmp (930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\check[1].4890741285782402 (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX12.tmp (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX18.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1C.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX1D.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\icon5[1].png (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer_img1[1].png (1581 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\denglu_anniu2[1].png (716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\t_bg1[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX3.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ltitle[1].png (2317 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\list_icon3[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX5.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\news_dian[1].png (930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\host_deposit_img[1].png (6811 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXD.tmp (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\footer_img2[1].png (1581 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ico_tuijian[1].gif (557 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX14.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\news_dian[1].png (930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX6.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fdj[1].png (1573 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGX17.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1003_s[1].jpg (4848 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ltitle[1].png (1563 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXA.tmp (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\denglu_anniu1[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1007_s[1].jpg (5232 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\bottom_line[1].png (949 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\icon1[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\kuaijie2[1].jpg (5775 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\footer_img3[1].png (2200 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\logo[1].png (5953 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\footer_img1[1].png (2344 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\logo[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\list_icon1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\list_icon4[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\button_111[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\button_111[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\list_icon3[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\denglu_anniu2[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\news_dian[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\host_deposit_img[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\button_111[1].gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\footer_img2[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\denglu_anniu1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\footer_img3[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ltitle1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\sosuo_bg[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ltitle[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\footer_img1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\bottom_line[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\footer_line1[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\list_icon2[1].png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fdj[1].png (0 bytes)

Registry activity

The process %original file name%.exe:468 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCR\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32]
"(Default)" = "%System%\oleacc.dll"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0A 63 A1 EE 1F 95 1C 65 52 46 13 30 98 7E AA 38"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Internet Explorer]
"iexplore.exe" = "Internet Explorer"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ??
Product Name: ??????????
Product Version: 1.0.0.0
Legal Copyright: ?? ????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ??????????
Comments: ??????????
Language: English (United Kingdom)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://moxiwang1.free3v.net/1/login1.asp	67.198.245.246
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=986628&web_id=986628
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=986628&t=z
hxxp://z12.cnzz.com/stat.htm?id=986628&r=&lg=en-us&ntime=none&cnzz_eid=1862759793-1415147057-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=602542183
hxxp://www.3vidc.net/	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/css/header.css	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/css/basic.css	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/css/footer.css	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/css/style.css	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/JS/jquery.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/JS/jquery.imgScroll.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/JS/jquery.imgScroll1.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/js/DD_belatedPNG.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/inc/index_login.asp	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/denglu_anniu1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/denglu_anniu2.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/snav_icon1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/snav_icon5.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/snav_icon7.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/snav_icon9.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/snav_icon11.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/tophot.gif	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/ico_tuijian.gif	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/nav_bg.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/daili.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/js/jquery.slide-zool.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/logo.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/icon1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/icon5.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1003_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1004_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1006_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1005_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1007_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/1008_s.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/diy_img.gif	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/t_bg1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/t_bg2.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/t_bg3.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/t_bg4.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/icon6.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/host_deposit_img.png	180.178.58.163
hxxp://www.3vidc.net/domain/js/domaincheck.js	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/domain_zcbg.jpg	180.178.58.163
hxxp://z12.cnzz.com/stat.htm?id=986628&r=&lg=en-us&ntime=none&cnzz_eid=1454631427-1415147057-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=861049228
hxxp://wpa.qq.com/pa?p=1:200899589:51	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:616909090:51	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:358909090:51	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:326016919:51	112.90.83.87
hxxp://www.3vidc.net/newstyle/helpidc/images/sosuo_bg.png	180.178.58.163
hxxp://ssd.tcdn.qq.com/qconn/wpa/button/button_111.gif
hxxp://www.3vidc.net/newstyle/helpidc/images/fdj.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/news_dian.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/list_icon1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/list_icon2.png	180.178.58.163
hxxp://wpa.qq.com/pa?p=1:583650000:51	112.90.83.87
hxxp://wpa.qq.com/pa?p=1:1079600949:51	112.90.83.87
hxxp://www.3vidc.net/newstyle/helpidc/images/list_icon3.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/list_icon4.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/footer_line1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/footer_img1.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/footer_img2.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/footer_img3.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/bottom_line.png	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/kuaijie2.jpg	180.178.58.163
hxxp://www.3vidc.net/newstyle/helpidc/images/nav_hover.png	180.178.58.163
hxxp://s9.cnzz.com/stat.php?id=986628&web_id=986628	1.99.192.15
hxxp://hzs10.cnzz.com/stat.htm?id=986628&r=&lg=en-us&ntime=none&cnzz_eid=1862759793-1415147057-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=602542183	42.156.140.25
hxxp://c.cnzz.com/core.php?web_id=986628&t=z	66.102.255.55
hxxp://hzs10.cnzz.com/stat.htm?id=986628&r=&lg=en-us&ntime=none&cnzz_eid=1454631427-1415147057-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined...&h=1&rnd=861049228	42.156.140.25
hxxp://pub.idqqimg.com/qconn/wpa/button/button_111.gif	103.7.30.59
user.qzone.qq.com	23.15.4.9

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /1/login1.asp HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: moxiwang1.free3v.net

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Date: Wed, 05 Nov 2014 01:06:59 GMT

Content-Length: 1578

Content-Type: text/html

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET
<html>..<head>..<meta http-equiv="Content-Language" con
tent="zh-cn">..<meta http-equiv="Content-Type" content="text/htm
l; charset=gb2312">..<meta http-equiv="refresh" content="5;url=h
ttp://VVV.3vidc.net">..<title>........ 3v.cm ................
</title>..<style type="text/css">.. .... <!--.. .... a:
link { text-decoration: none;color: green}.. .... a:active { text-deco
ration:blink}.. .... a:hover { text-decoration:underline;color: green}
 ...... a:visited { text-decoration: none;color: green}.. .... -..>
 ...... </style> ..</head>..<body><br><br&g
t;<br><br><br><br><br><br>..<ta
ble align="center" valign="middle" width="540" height="200" cellpaddin
g="10" cellspacing="1" bgcolor=red style="font-size:14px;line-height:2
00%">..     <tr>..         <td bgcolor=#ffffff>..      
          <b>................</b><br>..             
   ...................................................................
.........................002................free3v.net........2014..10
..20.........................................."<font color=red>.
...FTP</font>"..........FTP.....................................
...............                              <br><div align=r
ight><a href=hXXp://VVV.3v.cm>........</a> 3v.cm ......
2014..10..12..</div><br>............<font size=12 color
=red>5....</font>........<a href=hXXp://VVV.3vidc.net&
<<< skipped >>>

GET /pa?p=1:1079600949:51 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Server: tws

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_111.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate
0..

GET /pa?p=1:358909090:51 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Server: tws

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_111.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate
0..

GET /core.php?web_id=986628&t=z HTTP/1.1

Accept: */*

Referer: hXXp://moxiwang1.free3v.net/1/login1.asp

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 750

Connection: keep-alive

Date: Wed, 05 Nov 2014 01:03:20 GMT

Last-Modified: Wed, 05 Nov 2014 01:03:20 GMT

Expires: Wed, 05 Nov 2014 01:18:20 GMT

Via: cache10.l2hk1[39,200-0,M], cache32.l2hk1[40,0], cache7.us1[0,200-0,H], cache5.us1[0,0]

Age: 222

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Wed, 05 Nov 2014 01:03:20 GMT

X-Swift-CacheTime: 900
!function(){var p,q,r,a=encodeURIComponent,b="986628",c="",d="",e="onl
ine_v3.php",f="hzs10.cnzz.com",g="1",h="text",i="z",j="站长
;统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="1"
,n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f)
,o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k.ca
llRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createScri
ptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_
id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/
" c ".gif",p="<a href='" q "' target=_blank title='" j "'><im
g border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href
='" q "' target=_blank title='" j "'>" j "</a>",k.createIcon(
[p])))}();..

GET /qconn/wpa/button/button_111.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com

HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Wed, 05 Nov 2014 01:07:19 GMT

Cache-Control: max-age=2592000

Expires: Fri, 05 Dec 2014 01:07:19 GMT

Last-Modified: Wed, 05 Jun 2013 07:25:36 GMT

Content-Type: image/gif

Content-Length: 3534

X-Cache-Lookup: Hit From Disktank
......JFIF.....`.`.....C..............................................
......................C...............................................
..........................O.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?...u...k
...<Msu._........E.x..........w..].....n...#.4.EwX|...<.I4......
..[..|J....f....?...|Y...?...<}.......7.>,x..C........;.|..).V..
^..m5).../.K.C.>.....x...N......G...*~......x|9w..S..*.....'d/...~2
...m_.^...i...V...$.b.*.m..0~a.s.......n...Z..O.......;....>;}.....
}{..Z.....rhz...(.y.jp......|m....g._...!.4/./.{.............(p......;
.:T..iS.(B.>ow..d..e.EIEQ.ZN..a..g....x.....:.x.*....!..ZY.>X(..
..F.\J.'N....p.j{LL*......F..7K...Y....._.......~6..u._.Gq..}........o
]..E.xs].....m.[J..P.|W...,. .~ |h.....M.....'.q.;y....G.>8x.......
.m....C..{x..G&.i....A...?..Z........?.......=;O....?ho.|L.t..?..eq.O.
. o.....|7...tz<.0.M...."..d{..&...y~....C.....G..........~...?....
...P"?.>.~..!.?.{...........B.......;G...Kk9Z..d...e..n.....s).1.z.
b....Q.....T...p..WO.QwK...l.........?...2.MXa..IT...B:....Zt.N.H.rr..
$............x....B.G.....!...o.x_...|C..m..Z.R....G.&...{e2\9.l1.
<<< skipped >>>

GET /qconn/wpa/button/button_111.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pub.idqqimg.com

HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Wed, 05 Nov 2014 01:07:20 GMT

Cache-Control: max-age=2592000

Expires: Fri, 05 Dec 2014 01:07:20 GMT

Last-Modified: Wed, 05 Jun 2013 07:25:36 GMT

Content-Type: image/gif

Content-Length: 3534

X-Cache-Lookup: Hit From Disktank
......JFIF.....`.`.....C..............................................
......................C...............................................
..........................O.."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?...u...k
...<Msu._........E.x..........w..].....n...#.4.EwX|...<.I4......
..[..|J....f....?...|Y...?...<}.......7.>,x..C........;.|..).V..
^..m5).../.K.C.>.....x...N......G...*~......x|9w..S..*.....'d/...~2
...m_.^...i...V...$.b.*.m..0~a.s.......n...Z..O.......;....>;}.....
}{..Z.....rhz...(.y.jp......|m....g._...!.4/./.{.............(p......;
.:T..iS.(B.>ow..d..e.EIEQ.ZN..a..g....x.....:.x.*....!..ZY.>X(..
..F.\J.'N....p.j{LL*......F..7K...Y....._.......~6..u._.Gq..}........o
]..E.xs].....m.[J..P.|W...,. .~ |h.....M.....'.q.;y....G.>8x.......
.m....C..{x..G&.i....A...?..Z........?.......=;O....?ho.|L.t..?..eq.O.
. o.....|7...tz<.0.M...."..d{..&...y~....C.....G..........~...?....
...P"?.>.~..!.?.{...........B.......;G...Kk9Z..d...e..n.....s).1.z.
b....Q.....T...p..WO.QwK...l.........?...2.MXa..IT...B:....Zt.N.H.rr..
$............x....B.G.....!...o.x_...|C..m..Z.R....G.&...{e2\9.l1.
<<< skipped >>>

GET /pa?p=1:616909090:51 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Server: tws

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_111.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate
0..

GET / HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:08 GMT

Content-Length: 8509

Content-Type: text/html

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/index.html

Last-Modified: Tue, 04 Nov 2014 09:38:25 GMT

Accept-Ranges: bytes

ETag: "80be8e1413f8cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........}.w.T...f-.....&.[....=......<....ee..l.*. .....1%....E.
..M...M....I...:S......`A......$K.$..]..5.F....s.>{.}...j..........
A..{i......'...{.b_.>.....>... ./P..H..Q,A.?.cxN..].1<<...
.x!K..H..-.2..~..3...x...z..#.,'.-.....(;JLS.D. -QX^... ......*=.p"..x
N.9)...!2.k.....12......#d.([email protected]$.8wc..%....&Ca2.....
....g./.......t.#.akcsz...E.......oO...Q.n_....W..].....\....1.s..}(px
.I...-...e.*G..q<M.)......5...6..V;o/.0.rp_/..r.m...vnl..8y}.......
..s.. .{..;.<....K;......6.^....uyzg] X.V.6c....k...0&......'.?6>
;...."...Z...b...k7&.t......G.y!mT..........A*.../..5#...Ay..w..0[_/..
.........B:........!.?.p.0i4/.g..,M....hK..8..xAJ.$....t&...=,J.,M.h6/
..Pr.D...t....C[..$.s4-..3..R.hK.~$.......h.A0sZh$...K....).D.i...5D..
8&.) :..%^;^....k"..!P...c..GS...M#LVP..........b.z...H..7..YJ..}G..._
N.3g.0#-{......c&...\......7.....E~x........9~.$..Q..%.]f..>eL...99
...\WgG0?....lN..Gc.........w..t.. .1.!:#.8PI.g..........'...H..tciF..
.h......'Y>u..q.u...3..R..._..]..m..."..s.V......).K..l*..sQ_..' ..
....W...!.b.4p..8....R3......T.{.|z.=..!.I..a...X..D1..S.d0.T~0...g..~
....g.'....7...i......r2j2..C?.I.T....(..Q...<.................U..%
A..X.Up............g..g.!^`$.eX.6?..k....-....2...%.jN.....x&..l...<
;[email protected]*....)....`.b?...\@...Ha..s?...z...Ja.A..).|...aN.. {
{....}...g..x.......r.......1..L}&.zJ{..I...yJ.....0....a ...[...`g.:U
?..S4.....4...)p)..f...oS3.b'..>I.5|....G$Z.([email protected]."
.......(.f[..6.Q.q..=i......O.........../.g..{%.}z...."H.L.=.O....
<<< skipped >>>

GET /newstyle/helpidc/css/header.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:09 GMT

Content-Length: 2009

Content-Type: text/css

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/css/header.css

Last-Modified: Sun, 12 Oct 2014 04:24:01 GMT

Accept-Ranges: bytes

ETag: "80863c59d4e5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........ZK....^....Lo.&vI..J.j33..2.Yd1..J.e #[email protected]
 d.hH.A..6$.....O..RU..St.>.;.y...~2...T.{[email protected]=.\=.o>....M..RT
.. ..ppC./.l6.l....?......Y...R..O...;..$^e......._.._..c...o~.....n8.
.Y..U. ....#.......o.|....?....O|....z.....]|j..[....o....lNpJ..p`....
M....~..i...QE.....Y.....8.3..c.|6 ..H.u.... w..eN..$_..\e.<#. &?^.
......dIp...l....( .. ..}gk..K.yd..o...X...._1.....dZ..........q.. R.j
..A.I.V.....*B._u.;f...i.=sn>.x7L....h..".............?6.W......P..
.Y.c..O.V.'$r.=...u...,......~.....N.K..b.YB.W...jKI]...hmc.@.........
Z......i<q'.....i.pl......ap.k..N.A.g.......&.....-.^.....3...]....
'.[...<..y.."...y..O..F.....cE~.G.Q'..'......*.ET..W...#..t.Nq..ep.
..."".a...].......o.4..l.O.......I)......\.../.....n..O..~.....b......
W....[..{]..}...H.....<&%3..8a.8;.1.Z3..JW.,...j%..0m..._.B..G.....
..@@p...Zg..pq..z...4".".=.bb..' .(..8R.......P.v/..D......C.....~ .&g
t;..{.....>....}p.y..6.......W.E...z..GNO:...q..\B9.z.'|....6.[..j.
.lVD...n...mQ....$S.*w[...i..hN_...Y...%e.*.......C.:......p.$.%nrU.'%
.l....n......}].7?....QV..G.q...'...r....l.^......\5.x5'5.$I..Si)..r.M
....P\........rr.....e....r.b(_.]O..g.4....|-.4.\.......... .Z.c..._..
S..y.\.>..o.7<`8...6.$Ca.......f..V.].868..8...E.6..4<.....;.
7...P...'.d'!..`\...2qD*H......0..b..h....G.v..3.N.~..4&...=.>..a..
..BhD....]M.V2.......CG...x.~.X...K..?..8....B..NE..f..F..H.....u$#...
Ii......f".M....2q1......R.S....m$yk.FQ...K}...V..........Z-.e.....:/.
......,..#....)..&..8...............8:......."6...8.v.'E.>....s
<<< skipped >>>

GET /newstyle/helpidc/css/style.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:09 GMT

Content-Length: 6368

Content-Type: text/css

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/css/style.css

Last-Modified: Sun, 12 Oct 2014 04:24:41 GMT

Accept-Ranges: bytes

ETag: "80a1471d4e5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........=k...u.)@.a*!.}.{....K^..mIE>.h..-.....$W&w)>t.D..4..
..P[..;. '....eEW.Z.n.#.` i....#.....3gf.....i}w9s^3.1g........?%'zmj.
....c.[...~...:...N...{w..3...8....j.y.....;..........7._......$......
..........~q..[.?.s.X{..<2..~...nl..i4M.....~...o.....|.....>_:.
~....A..K.x.. ._...7...i4j.....c....k...`/~lGc..o......L.A.....hhZ..v4
.F...M..>s...W;~...c;..V'..?&....N..pz.d4p/6......&b?.....e.. ...&S
.`....^.Lq...h...'...[DF..]..s...y.7.f.....Pz............7..fk7.... .\
.....3..K..Cw......K.....m.......4o...IJ.=.`....\~$..l...A.N....W.....
.pF...Y......O.(.......L:.h0 Z.9y.:K...........j.`...'........... .&CD
...UJ.~.....In.....F...t...re.0...8.................C..Ov.....wFa...1.
....-.O:...M../g..{;..6....^-J..q..=4/..RL..=.5^.-.).z2.Xf.........L9.
..G.6...V..B&x.1CV.. 6>[email protected]...... .q.z^
...G....R...}.'...k.8.y..nh...'7>f.8i|0..~4)......I..<%.".3....P
..a....i0..e.bs..d....?..g(.B...t.p.=...MJ......na....gPAxyb...G~ ...c
&.....u..8O..^.....3.5p..[.w9......4...,.}.8..6..Ak4..Yg:..6...m..>
...$H ..A......A.C,....>.HH....m.xgS..d.e0.G.>`....!J..Z.H.H...W
...6...st..G....s ...$....n...Be3o.9...~....<)..)..`..pbU..`8..S7.J
%.J.m...wo.t....U`f..Dh.&'[email protected].,...B<
.(2....4nR....j.0ob.eS.M@.. ?...ys...X......./1,*$.=.....q.G..D... L..
....yY...B..r"...%4.1?.Hv`.Z......N%N.:[email protected]...<..."
..t......&....G..P..G.:.4!u.....'.h..i......"V]...)..0.D...........w'&
lt;..l.....iy......J.."..8.5..... u..i.B..O%:...9.$....J..m.C.....
<<< skipped >>>

GET /newstyle/helpidc/JS/jquery.imgScroll.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:12 GMT

Content-Length: 1696

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/JS/jquery.imgScroll.js

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "80469aa78dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........W[O...~N...=.)6.J.v..0........#7.p'.I...!.N..;..........mI.
..s.m........8...f.....Z.[....oG..{....I..._...Z...#u..R..{.....|...^.
#...x.....l...........#.DY...R.p,. ...m.\......O.....QwOow/,.,Fb..u...
..v....w(....1xw..D\.bIu;\...........K..^]/3.!%..DN.D..:..E}.=T..1..)!
[email protected].^.6Y.35.2.T.,.|...DH<!.....}..J............0)...`......
$.n~.gp...w.~.^G...=n0...,.v....s.|.e........$[...{thkGj..3..EHZ?|.9.3
]:.J't..K.9P..i.3..~X../,#.....M...I.j....p. V.(....."......1..T.s...h
."..o...]..Wu...vp.Wj.&.F.^..[_X...H....#........a..2..T.hv.b..i...E.P
.........S.B...D.0.?z.j...S.T../..E5....8g-... c..f..'..N/@m`.V2..bM?=
.....c.)k..vwH..L...0.`.T...f#...v.4&7........g...i ..T*..~m....O.....
.......4. ..f..5.#..........gB......Y~.[JL....0]|.-O#U...~=..%%.s..%c.
.,.....2M_...E.7...y.....$..50..Q)"."7.<.Nw_..].q.3.KD......MzG??EL
.G/...&.C.>..,......#.(..0... .{B.....6.H.(........2.Km.',F..a.)O&l
t;.#=.k...rJ5........h..P...r.^..5.v..e..H.A#.q{`..)..D{{P.XU3 ...[s.k
..e/....cz[51>n..i..^..........<..AH.Z..E vGT.b`.\.u.rB\..R;....
u.p.N....o......`.a,.~..$...B*,'a..!..T.....g....]....a|...;].VC..E..-
u......w.|.f..J}..w......G...\#m..gp..EZ..... .F.!.1.)..,&...5.3.M~..M
:...s.y..H.....t...#...H.T....-.....z...^&(.X.n@m..!........5....5...[
[email protected].?...${.N..
[email protected]%.:.`......... .`......b.f.`.^p.J..o.....8...m...N...l.z.>3o
.5j..5.....Q.i.v`.......3....a.F....n....>/.......=<.w..:qa...W.
....7>...c.:8..n?.M.n..n{..9u.................Q.....w.....V$).L
<<< skipped >>>

GET /newstyle/helpidc/js/DD_belatedPNG.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:12 GMT

Content-Length: 2755

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/js/DD_belatedPNG.js

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "80469aa78dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........Y{o.6......2{..YZ.[...T5..im.I..mZ.....Z.zU........Zi..&w..
...y..#e.......9;.=.).e|..G.y....x./G/...j....2.H....9..q"....X....qx.
;..o/.....8..C......|......JSY!.M.U.;1P..P.. ..E..?]_....K.<~|\..R.
$G..|*e.2.....c<....*r..x....I.J.\...se.......].;]_.........'...t..
"......'..W...Q....x..*Y.`Gi...j.JQ....Wy.:....".......Y..I%.A.K......
.U.}2 ....F}...a1.......H...d.O..$0....x&oJ..?_...8.t..n\.c....F....G{
.w.Bi/.3.....8v[.F.U.k.......U..y}.............Sy....4........eO.Ar..s
....e... .-k..L...F4....:..E ..S..t...SP.U}".#.......4.0...#t....A...^
.r.....7.%X....?(...J..b9.........!..A.....e.......R.>..!P...u'..P)
?(......E..'**......O.x..?..N]..;.?.S.<(."...._.8.9Za.........6..@&
gt;.J....N.?...|3{.p.b.KD..qs.T.]..u..'_....b..q.......O.<O..R...|@
.t%Z..0.".0w.CB.k.U%k.g.[..lEc....J,\._......?...f[;.......e....Ft..0.
...(...!.I,..xo6...CD. ...(-.=. ..wT..gM_3 o....|.=.S.2.w|[email protected]"3
Wi}.Y....B...3.?.....m...NGZ...`.....P.%.....@..#].H.X.\.....s.....l.H
..l:.c.q`c%......j. o...aH.WXWC..C.....r........p.....L..........6..s.
.!.Dqo..!.,....LU....).(.o..^*..^..hDW{.t..w.l.[....Z..{.z.F)..ak..fs.
Z.5xo.)...OuHH.G1.?@0..{~?.C...dC.$.........Q.......K<...5..sL..z..
.W..$a.El..!....*...'...e.........X.x~....* .Z..#.N=.f.e^.j....K.w'J.{
.46....).........%...B.9.../.......%.....l.Q..=..7...*r2...b....#.4o.L
.v.:.x...%..`.k........I......4S^ A......ZA..z...A....X...6Z..ZJf..T\/
6...<......k........v...R...L..#9`.n7.j..6$...3..=.n.z.....W7f...^.
[email protected].,...G........B.`.<I....z..mo..[.....
<<< skipped >>>

GET /newstyle/helpidc/images/denglu_anniu1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:13 GMT

Content-Length: 1979

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/denglu_anniu1.png

Last-Modified: Mon, 01 Sep 2014 02:37:05 GMT

Accept-Ranges: bytes

ETag: "6c89809e8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...<......... U......IDATx....S.e.....@....._.._..G
.X. ...,.].Y's2 q.)..,...((...V....e.x.......MiS?..t.y........|...<
.|..y..........=8.j...$^.!..GVQl$..<......!.C}...e.Q7..l...Y...g...
........U.............. ...?.i......i...Sv....U...kn.....{.]z.G.......
.1...dx.rz1gt...<.5J.v.ewL...S...,^?......&D... .2j!.O..>...!...
....T}..A.....]..,.yR....z...uI.......q,...8..2O..p.g..$...]=.f...9...
0W......<..#X.Im....s.8..&}....Xv...1.eh$.0h..Iqv.....e,..,.o.c/...
[email protected]'Qzu..z6.....z
A.k..T...L...l...l.I.s.A`.u.p.......Z...x.VRgD..p..I...#(.4j...d.0...o
.,Y..T>i......t.z....Iu...8|1..-F.......O.....&.....<...../....q
`j%.F..<i@=<[email protected]^..[..........p..K.....P
.!F.3..L,.....#s....0.?.P-..I.8.3.h.....>....gOA>.,JZ{.W.>.A.
1....,......?..p. ..n.[Nd...w.h>o...c.#...;0..O>...?.....d{#.[..
3../Q...4....~...n.ZGyTu.?........\T.....?.!c.K..Dt}.....:U.......J.}.
......j..J.......z.F.....W].d.l.f../..........}....}.[g.zpV-..........
Y..... U...W.f..`.EU..n....m....Z......7....}...^.......k..G=N]......w
`!.......t.i-...y...>.....d...e'.i.....&.y.>.`..^.c.wc...,4.4...
.......J~en?....D..!.J...w.V.....:GM\.?......g.'..Z.Y.~...............
..w.......<.....wv6L.1....._.....A...).......wL....u......>./.|=
p@..|.....k.NE......0.R.6Mx..2.....[3 p....<....v....M...A.........
_....k..i.j7....W\d..........p...k..../R.......0FG..L>....Q.k>..
.'........Z...n.K..u...[....-Nt......c...e....u...w.CF............
<<< skipped >>>

GET /newstyle/helpidc/images/denglu_anniu2.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:13 GMT

Content-Length: 1972

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/denglu_anniu2.png

Last-Modified: Mon, 01 Sep 2014 02:37:05 GMT

Accept-Ranges: bytes

ETag: "4f7b9f9e8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...<......... U.....{IDATx..X[OTW....._.?.^....>
.-...n..e....X...T.M....)....8........p..jE..*..)&.C........sf.-)..u..
....8hdL....^tl"'...n<.C..M.Pl&d..>>)p....C<...%W.k<5..
x.96.5#.o&/0....L.X>...>-o./....0......;..5.......V.]..*......C.
......<...3..5W..fN .....>c.pN.c^..aGZv.<..!.xC.......5x...M.
......5...yc\........-..i3...h.S....a..D..t...Z.....o.-4.`s.... A.q.?.
c...c.O.5.l.W..6g;.....C.....~......1..s>.}R..'.t.. .y.4.fh.g3h..b.
.!...)C[L..R..#.r........a...<.\-..s~sA.g..~..[c.iQ. ..5..&.!qn.V?q
....~f..K(.z.Ns6...4.........ia..M{....d.......).y..g...DG..&...u..ZT\
..wm....D...v"I.=....f.........H.....Q3...8....m.:....0.g.]..#......6.
..........5.=...c.44..f....M...L...&_..B..5.~.8....4....x/.|.'.A..cp..
8..c.`....I.L=.-.|F3'...._...,..}R...,.........#.k[..7....4.>...g,.
.1f.....O.&......;d... q....=...V. .h<...g.7......R.}.Cz.(>.F...
u.....Q.U_...j...........9.....)..F..^S,.z.?..y..E^...........Q.gO....
~...Q.7..t.-X..&$[@.-............,2...0........N..[......<.......e.
..i|...X.0.w.:[email protected]...{[email protected]._..C...9....
*......'._e.. ......`.".0k...;.8...?.F....h&?<.....Y}.'..S.~.E|....
.0.`...5,{}../........t.Ly.......zC.....z*.. ....U{.}.w.:S...&~..b..D&
....j4.<.e.w...An.....y...@X,|.....fX....P..w.#yk.3.......`....y...
..b.#...[......w...#..:?.pA.8 .......u...ra.. ..(.R.|.{....j7......../
."...5..@..[w=...].&.z,...E.s..g^.P...V....[...`.H:-yq)`~.0b.n(......Q
...{....$.....>\.......8 .b..X*{...`....eZ.]d....W.<.$..>
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon5.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 1209

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon5.png

Last-Modified: Mon, 01 Sep 2014 02:36:59 GMT

Accept-Ranges: bytes

ETag: "42b6e99a8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............[k,.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:6E33D912C82511E287839A61
A2744FB3" xmpMM:DocumentID="xmp.did:6E33D913C82511E287839A61A2744FB3"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E33D910C82511E287
839A61A2744FB3" stRef:documentID="xmp.did:6E33D911C82511E287839A61A274
4FB3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...Y...-IDATx.b<......w........?.....X..
O..1......r.3...:.....?g......?.8... 1...@5L .....m..a=b.......5.}....
...)..............3......L..)..............EW..c.R.,@.......;?........
..L..........az.R.R..H.c%. ..tE 1CU.. 5 ...EY.:.q...a...b..@r 5 ......
..*WS.)0. 6H.$.R.... [email protected]."...X...W ...../.b`..`.w.r~. Fu...
.IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon9.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 1238

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon9.png

Last-Modified: Mon, 01 Sep 2014 02:37:00 GMT

Accept-Ranges: bytes

ETag: "af595e9b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...............w&....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C27958F5C82511E298A4B905
8558BEAF" xmpMM:DocumentID="xmp.did:C27958F6C82511E298A4B9058558BEAF"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C27958F3C82511E298
A4B9058558BEAF" stRef:documentID="xmp.did:C27958F4C82511E298A4B9058558
BEAF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.C.....JIDATx.l..J.A..g.n..f.$....".V..(..S
K_.^.@l}..P.`!.......BlD.....I6q.?......|.;g..{....M6`....C..wL.^.9...
..U.....b.....7..4.d6...-.......W;.Cj....g.'f..c.0./........)g..Fl&...
.V0 [email protected]..,(.a.Az......q,...\[email protected]. 4.-x.]i..n0....
,.t17e...'..Y..Y79...$.......g...<k=j.o.{1.......I3....#......zi...
..].i.BeH.BE.r. ..-.qm/.......IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/tophot.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 2256

Content-Type: image/gif

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/tophot.gif

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "80469aa78dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
..........l.k8.y...3f.....j..LwE...e...a..v.h...."K.......%.........T.
.e%.1B u.T...W...{_......z.....u...b...D... [email protected].@ $.$.K.............
e........Q&.Gp. q.r............W.....@...;.=.......Ax\..C..A<.i.q3.
.......q...lBO#"M..).^...xv.U..`....c!..|.tUCY..]\.E.i.........P.DS)..
.Z.. .. /..D!...q..G...ZtV..?^.b..w....*%.tG.r.;..ud...... [email protected].
...8.....<.UiP..,.5.HX......D.....A.7N.Fs....O.....C.....4.l)r..R..
\.....~;..o.f....yxp..Y.....t."..W. . ..).....&xT..K.......P...-....):
..:......F.:.C..bo......n.G:..v.P....x.#{.J...!..G....c...x.......^..b
.z..r.t.U...x\...(O..Z.s .Cw-....7~`.0.9;!d.^.....gD....$ZA...........
F....x...i8k.?......b9..G.6$.!....B.a...... .....2...:nE T...P...;..A.
v.nB.~.....G...:...G.|.<.>.<h;.....8..0].F#..{.`j..%..|<..
R...l(.W...'B.....:......v'.,v...m.q....g..R$..g.2.y.8.L...bk.hB......
.t....j..%........M.[.^..(Xg..%.L.... ....r.....tY.k.M......Y..0i....e
r.Q........hS.[..T.n..6W..9O.M...;.]j)......z....>...q._........R..
...gu7J.(o.#s....33...a]"..YA..5X......f..n{.....:......}w...6.~.5....
uFag...*#...Io;&^7;<]?.: cm@-./a0.b.H..E.......0u%.......~ph(C|...1
...StEW......Z.U.V..)....;nr..}..,..ai|..-..."|....S|v.f....|2...X.ox4
.`.u.r)3.......o....d.'W0e.\..'[email protected].>...M.Y.....
.......k. e.?%Z..o$.S..7."?y.N....F1...)Yt^.....T..%.......b./IY(..".*
.~..>.....CZM.....M....8.].Z..7u.c.....`.......u.Q....l...e.kzy....
.....Q.h....B.?....xi.."..e.o.FT..%...'..T..M.."O...G.{.-.S...~.e6{..?
7%.b..kx:..._..)e0F'z..{.%[.&..}..`....r$....y....A....N..%_J.;..z
<<< skipped >>>

GET /newstyle/helpidc/images/nav_bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:15 GMT

Content-Length: 2869

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/nav_bg.png

Last-Modified: Mon, 01 Sep 2014 02:36:57 GMT

Accept-Ranges: bytes

ETag: "1af092998dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......(.....?..w....pHYs.......... .....MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/js/jquery.slide-zool.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:15 GMT

Content-Length: 1168

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/js/jquery.slide-zool.js

Last-Modified: Mon, 01 Sep 2014 02:37:22 GMT

Accept-Ranges: bytes

ETag: "0dd32a88dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........V[o.T..n.~.p..[I...<[email protected]
...!...Z.L.v..s.q....8R../................=k. u..X1.{.J.......b.&UW.0.
.P.&..Tyj...~uq.C...........#..n.........E..o.H.....p....&.....O^#...M
I).(.(z..J....9... .?D......!..#..d.0.L.&rf..-4!(..*...G.......G......
[email protected],Z$S.B.JB...4k..ud
0..7..7.h........f....$...#J.!.Q......]r;.4B$...............7..s..A...
.....=U.........W/.N.O..S...cc...Q..,!...a...M!.C.......O..q.7.....c..
"{..9.n......w.....o.>.7i.....u.P...A..M.PL9.LP.............lZ.....
..(..b>.~...@....&..#...89......g.......UU..q7Y...`.j..;..../....tE
!y..\.......I...z......d.-5..[..=9L?..=..[K..........F...O(.@.$=j,KS.7
Wu(..[.I)..(..p.a....P..S.....kq....!..`...6..^o.Cj...#...X.B..i7.....
M......(...N.....)..A.X..D............,l.K...4..............E%....(A..
.\Z....^}....0.3.`..<..].~.tY.V.Y.d.(o....M..Dg....W.}.t..`.....O9v
...,z.Z.j.7q...m0q.V'w.A.......x.2C8F5.\_.\[email protected]/.1.^d
bz:...........Ql.pzI......5.b.Q......P..b`...(...ML....A....u .Qy.-.v.
.g..f..Z.w.`.1E ..X..|..h.VH(~...V.{./..RuU.vJ.f.K\......9B.p...&eE...
.....3./-...U............K..^.2(......4..'A...`m.....^Q.I......
.
<<< skipped >>>

GET /newstyle/helpidc/images/logo.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:15 GMT

Content-Length: 11624

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/logo.png

Last-Modified: Thu, 04 Sep 2014 11:10:00 GMT

Accept-Ranges: bytes

ETag: "074a2c430c8cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......C......)......bKGD..............pHYs.......... 
.... .IDATx..}wx.U...wf6[. ...B.-Ti.JU.....~..)*.....U .A.U_...P.ET@..
=@B.$. @Bz6..3.....ev....$X..<.....{.&..s.9...(.........(--.....q.u
.....o...rG.P...O..........<....._}..o.|......#...w.o=..n...j..q...
.c<..z.......VQQ.Z...'|D.......3........   ..F.)m..a..{M&..||......
...>..o.|..!33.g..}...z......w.!.q.:m..'.C.....}p....p.../.s.g.....
.....Qvvv...#Vh.........7.L.........w}...r.JU!Gg.^.....)... $$.Nfff...
;.... .lQQQ.....,.Z.....j......TN.....>8...$:%%e..K.zK.'$$..5k.#...
....-..*%%...#F,............}...Q W..(.n.Z.....:e...{.....>L&....&g
t;X.........W.Z....k..~......p.B......6l..D..........>.....>..c.
......>.P(......d{j ....{.....}...3.y..g=.......U....._....y?w..b..
M.YYY.'L...F.)[email protected]...`..c. 33.g.&M..T*]M.QJ..]......?>[email protected].....
?.L&......%%%......o.3.#PJQ||..^.z.(.MVVV...{.......k......8x...O=....
..\ ...................bU...........G}.^...Rd;...`...C.v...<.X.....
.........B........f....JJJ....*......MJKK...,33...~.......4j....n..M^.
.V'/;;.K..-O..W....n#..<......R..( Dm....k{.....}..=..5DFF^.....z..
..W.^)^...M].hQ.OE$F..............B.0....w.,33...a.>..>...z..4h.
.>.......6..`...g.....s.;H.x.YR*%.....B.(H...X..-.d...9.4..`b..@.?.
..8..r.....].m.X........n.:5;;.K....U.... ..J..Q.F..........{.a.Az]...
.....K<w}......o..c.333{*..C..M ..[....dy3..:%.3.....Lp%.n.9.H$9&6.
Q......'.....L.2...d{. Q.E.0...?..j..<!!a.x..a...[.N...,..633.g..-O
a...YW.\............E..gj.....{a..9.tVVV..-Z.a...W.cccO{..~....JrJ
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon7.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:00 GMT

If-None-Match: "a938259b8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:16 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon7.png

Last-Modified: Mon, 01 Sep 2014 02:37:00 GMT

Accept-Ranges: bytes

ETag: "a938259b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/snav_icon11.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:01 GMT

If-None-Match: "8174fb9b8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:16 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon11.png

Last-Modified: Mon, 01 Sep 2014 02:37:01 GMT

Accept-Ranges: bytes

ETag: "8174fb9b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/logo.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:17 GMT

Content-Length: 11624

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/logo.png

Last-Modified: Thu, 04 Sep 2014 11:10:00 GMT

Accept-Ranges: bytes

ETag: "074a2c430c8cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......C......)......bKGD..............pHYs.......... 
.... .IDATx..}wx.U...wf6[. ...B.-Ti.JU.....~..)*.....U .A.U_...P.ET@..
=@B.$. @Bz6..3.....ev....$X..<.....{.&..s.9...(.........(--.....q.u
.....o...rG.P...O..........<....._}..o.|......#...w.o=..n...j..q...
.c<..z.......VQQ.Z...'|D.......3........   ..F.)m..a..{M&..||......
...>..o.|..!33.g..}...z......w.!.q.:m..'.C.....}p....p.../.s.g.....
.....Qvvv...#Vh.........7.L.........w}...r.JU!Gg.^.....)... $$.Nfff...
;.... .lQQQ.....,.Z.....j......TN.....>8...$:%%e..K.zK.'$$..5k.#...
....-..*%%...#F,............}...Q W..(.n.Z.....:e...{.....>L&....&g
t;X.........W.Z....k..~......p.B......6l..D..........>.....>..c.
......>.P(......d{j ....{.....}...3.y..g=.......U....._....y?w..b..
M.YYY.'L...F.)[email protected]...`..c. 33.g.&M..T*]M.QJ..]......?>[email protected].....
?.L&......%%%......o.3.#PJQ||..^.z.(.MVVV...{.......k......8x...O=....
..\ ...................bU...........G}.^...Rd;...`...C.v...<.X.....
.........B........f....JJJ....*......MJKK...,33...~.......4j....n..M^.
.V'/;;.K..-O..W....n#..<......R..( Dm....k{.....}..=..5DFF^.....z..
..W.^)^...M].hQ.OE$F..............B.0....w.,33...a.>..>...z..4h.
.>.......6..`...g.....s.;H.x.YR*%.....B.(H...X..-.d...9.4..`b..@.?.
..8..r.....].m.X........n.:5;;.K....U.... ..J..Q.F..........{.a.Az]...
.....K<w}......o..c.333{*..C..M ..[....dy3..:%.3.....Lp%.n.9.H$9&6.
Q......'.....L.2...d{. Q.E.0...?..j..<!!a.x..a...[.N...,..633.g..-O
a...YW.\............E..gj.....{a..9.tVVV..-Z.a...W.cccO{..~....JrJ
<<< skipped >>>

GET /newstyle/helpidc/images/icon1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:17 GMT

Content-Length: 1477

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon1.png

Last-Modified: Mon, 01 Sep 2014 02:37:25 GMT

Accept-Ranges: bytes

ETag: "30bcaaa8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............F.'.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:87E19E78F80311E2B388A906
8582B3D4" xmpMM:DocumentID="xmp.did:87E19E79F80311E2B388A9068582B3D4"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:87E19E76F80311E2B3
88A9068582B3D4" stRef:documentID="xmp.did:87E19E77F80311E2B388A9068582
B3D4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?> b.....9IDATx...Mk.A..wfg7.."...z..Z6./%...
..[1.S...x...... !."..x..h.....'..I.A.d_..SvCH........3.;......?..h(..
..u..cl[Q.M..........v.}..A...}.y.q.C..>.....4M.RU.p].S...-(..L..t:
.{...8.X2..R....h..`*.GD..}C.g\[email protected].#..?|.a......
.W..~....b>.W...?.........j......~.P.R.I<..-.{...7a6.zC.^...#.H.
D..s.5..f...h4z...^c-6......0w2.<'..c:.~T...c...,w<.?.u(..(..J.F
*.*b.Z..r..3L.......F.."....A.....1.$..I..:..B!.B.k.........~..YQ.2...
../.M.{....m.P&.I.!*.E............'...K?V..E...]'B..6...f.....r;.RI...
...a./qqy...gn.4..a.D.`p.{...|..Lz.....~.F..jg..qV..ag......Z...N.
<<< skipped >>>

GET /newstyle/helpidc/images/1003_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:18 GMT

Content-Length: 10773

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1003_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:23 GMT

Accept-Ranges: bytes

ETag: "8073cba88dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............eT[a.4....{q(..-.<....R.P....w.....;.....b.8.)v........
;3..k...{f~.........oT......*..x^.(.P.....@.{.0..PQ..10.1_`.x......GD.
.G...C@F@HLBJJ.................;[email protected]... .....P........
..._...t....H..X.....$.d...qQ.p..........D...r.$L:.V...d..z..a.).s. ."
.A].bVa......M..,......... ..}..(.H.h....2...PP10.&b........1........y
&.1..t..6.........,.B.^[email protected]...
3 ..j.0.y..^...F.K 5...K....X.m......`..A....ta..h..(.\....;..N^2.Bi..
.yj5.......I..x.{.5/.U.p.<[email protected]&
gt;u....;...x!]xp.K...j#..}..!..`n...W%G].J..L.n....i_...~..>u...t.
........;t7wA}.a/..'f..V...}H?........K......k.{7..ZU.L-Q.]C....>U;
Q.tRZ.J.. ..)G..j..=..%.:.k.....2..o..zjg3...d.m}..a."Mirc......Dr.<
;%].I\..zw......A....\.Yo`X#S.....&.,I..*.....`O..=wCS....."'..MR.....
...I..UA..rec..-O=T.).m....o~.lQwfS.>.K.Z.....8.Wf.u~3/..).hs..?.h.
.J.....w..W.s.....(...n..n[..I.B..t.......R...FMP.B.3..DT..../..^Wa.o.
..~..*..j[...M...M"=m{A.&.....e./g...............K.NE.0....n.0.O;W._.K
.j.......N...T...jqJ6...!F..6..../...$...H2.N..3E...x...Y....R....E...
%.....hS.-.....28?...=4.n..7[.......;[email protected].:.h...Vm(S..88
..jkd>..\..n....P.&....|.....6s..N..[......~4..O...S.%...q..*f.....
.vd.2.\.'......4E....r...Q..'|.0...Y.....ZKc...G..........Tsm..6......
....=.rN. x/.F.*...I..gd..."f..-..y..4..n.......]`..;..I...8j:.3V.ieX.
[email protected]...?.....l.z.$O.o.j...}.d.4KT.`.......Y.......6.\..'...1....P....
;....R.d..LB...... ...s.[.....e{ .......b.....xY....r.f.....4n.k..
<<< skipped >>>

GET /newstyle/helpidc/images/1006_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:18 GMT

Content-Length: 8912

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1006_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:24 GMT

Accept-Ranges: bytes

ETag: "0a64a98dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............UT.P.-...8-n-.J.../.....Z(..-..8..V A.Cpiq/..kp-Z...?.....
<..3.z.k...^.a...f.V.. .`U....@...<....8........x.xx..x.........
$.$$d.T...).IH..=......%..g..a..........3.xDxxD4d$d4..x..P..R.)8X..lJ,
.J..n.......W...l.<|.,\B"..:......_.x$.....d,..-P......_.*..p.[...3
..|LL..O.q*Ba..D\".y.?.s{x..L.a.<}.R6.9.....:....._..M.....r.......
.'&.............>...{".."..#,.|....SW.z..R.....s.R.....P.^.N6RhRS.2
....F.=\[email protected]/.M..c]E......9=......B..OhJ.}^)^..0;..k.E.\5. ..?.'..
?....CK...: ......R........FU......[..^[email protected]
...-..8_.-.P......9.].S.Z....pf.S.....?X......H.m..[.2.2....&Z..B..z.8
r..O.g.#.3Ut. ..........I..=...1aW{..W. 1..8Q..H..:...^$o..VL./=e...:O
i.[P.y.lm..`2.......>R..#U.......9.K(........)..du(. ......7.......
*)..t...........@....].Q}.E*.....I.w.$..[..o.......0.^.........A..y...
...p.v.M..~.I..%.......]e.ln>.....{.7.$...,.].7.....z[/...3n...W...
..#.3..z......A.t...ND...??x...p.?R08~...:\;V..W..#..zLo.......M..9..3
...\....J.8.M..h..x\.=.^...X.0.;....W/.......o..).@W b.9..v..~%....].m
..].=...uxzx...8x............6u1y.<..h.....d....L4..j.U...........h
....M...5......&_....5.|.].l.......3{.}....}.-.O.wh..E/&]X.,.... .....
.d:..T............xm.'.!..n....Vq...N.....]4.....\].<R...j..E..{...
2.B.B.$63....F.:$...U.A7..\..P.*.W>r.E.7...^*.\..'..as..fcw......1.
.K.9.3...r.[....9S.....x...f*.i....r.....[.a.z{.~[Yh.. M3.C}9.n/......
IL._.jRilA.G.b.E.....^..v.;A..2.........R^...&.&'........S......q..;..
,.,r..O~..bNw....=....o....c.%]E.R.;4...?b.3.{=-%C/...zs.....<6
<<< skipped >>>

GET /newstyle/helpidc/images/1005_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:19 GMT

Content-Length: 11934

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1005_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:24 GMT

Accept-Ranges: bytes

ETag: "0a64a98dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............eTTo...ii.....F:[email protected]..;..P.......A..!..s....9.......<
;.w........Z...`...*...........`......?.....>!...GHH@H|.....11..%..
).)119.9....T.I..P?.O..|..$8.E.....x...........{@....C..R..Q.`........
...S8.x...D..IH.94..p.....# ...g..g.....<.~AH.iA........{l/..i...."
..?...=.g`....~.#*&.!)%.......e.m.]=}.C#K k.[;{..O/o._?./_C...}.HHLJNI
MK.((,*.)- ..Y...........?084.g......."..........G..._\^..o.....p./..r
Q.....7R..\..>.9P..<.&|.B.......O.h^...u...h!h?.O.....8.......?.
..[d.7.......p.-.......})....Y.*..........i...9.q..$Gh....}(.Hl.......
......`hw.'p.....Mq...I...V5l....7.).7S..b....r.....2.L.<...w.YCKz.
i..._pk(.N.v.....}.....n&.2.O.(.s..j..4.e......./.mw...1.S:"..e.......
p~......D|.5..X..W.!..g.S.$..k?t.F.62(........k...r.2Qf.3.V.gl....I...
.}<5..4..........V.....T; .3.Fe....TwZ6a.8...'.......a....q_...X...
.%........q.}...*x..!.....n.S......Z3.j.l...........UC|......`gM?0u...
9A...-..5...2......N..*..[[email protected]=..x".......
.s.J...F..K.5...u..2......=..[].<.......(0.,.._)t.?...0.D.|.....#s.
.f..=hI..>3.......2..2U....N.3.g0[....~mO......B....9>}9..]>w
.i...l....;..%.5.CZ.g.z...-O.Ipx...\g.!....D7k....T.}...4z[5...s......
.....J...E..H8.vy.._.hY.m.1...Xs&LC.u.....s...H.?...Wi....W3.7..uLsx%.
.,....%..a,.|......XeGT..:.C)*=JG/.....^F...*...0..U...5j..2...%q.hgMG
.]..&.].N..uc6.$..A3.^.}y6B.I.........9..39.k..........i..Z...7~h...*.
]....\u.\}..&L......v%...`k....`..m..F..........|..........1G../;..&.V
..d?..Z..J..E....Kx.......Q...`....z[f...v..f.^.........$..X......
<<< skipped >>>

GET /newstyle/helpidc/images/1008_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:19 GMT

Content-Length: 15056

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1008_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:24 GMT

Accept-Ranges: bytes

ETag: "0a64a98dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............UP.o.48......{pw....$..{......>...........%.......j..b.
.....t...O.y]y.................... !".w.....................,L,,l.|\l.
<.,,\b\<.B"".7oI.....'$".......2.....!6.6...z.......iH.x.D<.$
<..!.%........]..(h...D$...........6:::.6..?......O.F...^Z.........
.dH!1..^..|......... .`....r.((oa......V....1........w!.#FECD..*..'...
6..2......x(.......5M].......y.Z._!..W$).M.t.|2fnE......!.k.7H........
...XS..._S.f._..Y.ixX|...$aC.*\.....Df{l.....:.-.Q.w|u}A........m .^..
.PA......WY~.{(...&.f=..$.p.tm..S1.._]^<........nb!m..1!....m.V.A..
..3&.:...^...'.U^{...}:.X.D..}z....,S........D...OXn.R..3^di......>
>....9)o.6N.....&...9.~b~..t.......;.I.q.....h..D'/....3;...l..w8..
..Qb~....e.Q=7/..A...8%.FG.7....L8.).......m..Z..6.GK?..Z.HY...$^.[k.0
.g....D........G..~.....&}. @...a.....K.6. c....A...;!.~z[[.u.>.?..
C...n5.......)8....M....D...=q....{...6.]........d....t[. .....;.i...E
.K..1o.I...^4.<yQ.B.....(b.?._..N..N...l.v..U.....Qq..ms.........&.
.`../sg..m...Jy...?.......4....U. &~8uE)@t.X..}C.|.L../..j."n.b.R.N6.r
w.>.)W......,.e.t.*[email protected]......&....
y....n..Tw.....:..Y.?.....D5fj......C....[H.]..6.......^P7v......~6^nM
D8!I.~..d.(.<4.0H>.."U...w...G8...)*n...Z._[.....){w....q./s|.&g
t;>1.g.k.iE..5.T.......".*.HM....pahT.....=.8...Y.;)7.Zbh8.;..j...l
..;....tA|.N.'.d1..:.s..u.4. ...ZW.hE_..5..s...1..s6.t...r..5..*..U<
;:.[..Y.....2..1q...us.>.mI....mpf.......3Y..V...@Y.",.&.....J.LXUG
..c.n....L....@"zc6 .L..t6..%.....{....J....2.....u..w............
<<< skipped >>>

GET /newstyle/helpidc/images/t_bg1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:20 GMT

Content-Length: 2975

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg1.png

Last-Modified: Mon, 29 Sep 2014 00:33:50 GMT

Accept-Ranges: bytes

ETag: "eccbff97ddbcf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......A.......8]....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:882100921F3211E3B9F694C8
E9BC69A9" xmpMM:DocumentID="xmp.did:882100931F3211E3B9F694C8E9BC69A9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:882100901F3211E3B9
F694C8E9BC69A9" stRef:documentID="xmp.did:882100911F3211E3B9F694C8E9BC
69A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>1 ......IDATx...{PT........]...>...\.`P1
.GS..3....I.....;..L.Uk.....M....5.u .i*..d.i.FD.q...B.e_,,.d....s.i",
!.).;.7g....3w.....~..}>..1...#.x....1M[..7${...5.....sI..4.G.M:...
T...*.uD%x...F.eY.Z...NuI?......L.....BM.<=tEq0..qd1...........MDS.
1.....S.g$}..U..6.......@.../**....NP.<...X.~........p}9.vS..N...&.
cbb.Je..t..).......g.q.C...u.O.t..AE.3s.$..mZ.j..o.q..l..o&..).]?.h...
~.3.a.&|i/L4s.....\.......x.6...u..*..A..B.@`hh(....G....8J.>]h...Y
S!P.!G=.p../.r...NffZ....."]..G..t<..J..H....|..zE..R-fU....2.5.I..
X.7...x.rF..7U....96...O.~.5.....G...-l.J.._..:.n.z....'.]].......
<<< skipped >>>

GET /newstyle/helpidc/images/t_bg3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:20 GMT

Content-Length: 3117

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg3.png

Last-Modified: Mon, 29 Sep 2014 00:41:24 GMT

Accept-Ranges: bytes

ETag: "5673fc187edbcf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......A.......8]....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B5B7E5961F3211E3AE7981D9
CAC37224" xmpMM:DocumentID="xmp.did:B5B7E5971F3211E3AE7981D9CAC37224"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B5B7E5941F3211E3AE
7981D9CAC37224" stRef:documentID="xmp.did:B5B7E5951F3211E3AE7981D9CAC3
7224"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..\.....IDATx....PSW..oro0....#.IH.....U.Y.
N..t..l...N.v:..Nu..]w..Fg.#.....N..UFT..T.J..\E.- ...!<[email protected]....
Zk.(R.....3...{&.o....\H&.....F...n..l333-}o. .n.U1H.)-...Y..[L.._...-
.H..N_#..O........F..:....!.E;.9CP Bg.bP.\.i.d.@..;..L[........^....d.
.(...F.0......K.c......[.U~..w..=.j0.?.8.s.....~.............#.RBE`.K.
..R...L...\"v0FQ.0.R.8..|.|...f."...F.I......-SO)..2.. ...5..a.^NG}.].
.(f'.L..5w.1....b..F.V.E.....A:......m..B/Rh.^..E.".C.K....(.i....1...
mO..... .....L..].)....9|N:Q>6....;... .......w..^..N.X(@....v.l.l.
A.T.TFE........|l.Ml.).}.x.j.....6..`UB.....d..3g..ia.k.w.U.y.t6..
<<< skipped >>>

GET /newstyle/helpidc/images/icon6.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:21 GMT

Content-Length: 1576

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon6.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "163a53ab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............../W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:DBC4FAAEF81011E2BCE1848F
A694D838" xmpMM:DocumentID="xmp.did:DBC4FAAFF81011E2BCE1848FA694D838"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DBC4FAACF81011E2BC
E1848FA694D838" stRef:documentID="xmp.did:DBC4FAADF81011E2BCE1848FA694
D838"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.M>.....IDATx..V;..Q......Q....$.BQ.."..
l....$. ..j... (.[le4.),.D..X....J.....P.y..y......8.wv..7..s.....w..W
(.lF..v.^..!cl..^..l(I.k..T*......(...t:.......c......@ .%..m.../.....
...n....m..l?.F..r.|4.a.^g......./..op.V..#...fK?,......m..2.,.J......
._...]...6q...i..../......dr...........[,.KA..L6:.F.[..O.. ....0.~...b
.......jbv...R.....l.>...B....I.z.....^....)X.^..,.j.CR...t:})....4
.%.D"....n.c%...x<..~.lD-h..!....Z.S.z..bB...R.N....7P!?...j..NKi&.
Y..sN.O)....n.a0.LA..L.....U...M..Eq..Bd...R.d^fZ...a.<..t[j.V.u..M
.M<U..>..\..B............Q.0g?.J.gx.=.8.!.U..n....s.`TKj.Im.
<<< skipped >>>

GET /domain/js/domaincheck.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:21 GMT

Content-Length: 632

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/domain/js/domaincheck.js

Last-Modified: Wed, 03 Sep 2014 01:41:36 GMT

Accept-Ranges: bytes

ETag: "048a73218c7cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
.............n.L.....w8xS[U.........@[email protected]......)...!Q.U$`..VH..A
.!.lPv..a...D.0MP#E.s....9#...b.O`..h.hN..u.[..F.b.......,[email protected]
yj...g.g..._..x.........yK.E.6-..=.z...C..........w.......s.xv../.u...
Vl:..S......!.....F..D1.).Sw.....M}...b6....h.p.H...>........DRC...
@.%..!........D w[.:........U...W..^..P...?0..t..X...DV.ct.3|.z.0...%.
T.{X]....&HR./..]L.,m._}.n...y......z..n....Y^..b2{J.<!..._K.T.....
mPb%I.....16W...6..?.u..[..^....kU; [email protected]...|....=..`s...
F{......7}...nz..z.C.........m.............|b-....~Y.yC^...fm.k.Z.<
y././..x...wN.........t...l{.......|.(z..R7".}|<.4 ..EO.0..B.......
..........(.......


GET /newstyle/helpidc/images/domain_zcbg.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:22 GMT

Content-Length: 3097

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/domain_zcbg.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:06 GMT

Accept-Ranges: bytes

ETag: "075a99e8dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........W.X.W.......j...iT.V......-...C.O....F'3qfB.m.V....~u._.*..
..m][.e....nU.o[k}.V .......$..o....~].....;.{....3....27..(..h....~ .
[email protected]!J......#..'.r...>...zd.........z0............PH..
.0.....6B`Do....&\5...h.....s.U.........(.Vo.F.tZ.~.!*.......p.......x
...2.|......p...K9 [email protected]^..q...2.;..&..{....z.....c.2....(d.2....
O.$D}.....u... r ...D..`.....E.A...z...6...,;g.sP...d...)....cvzR.0fP.
....8Z-*a4..H.M.B..1n.Q".'...{...L....N.u%..}....]...).,.G.. .bj6.....
41.!......J.....&.H.#dZ.b..j%SDAZ.7t.y.%.4.,%...\.1.........M....K"U.1
........$'.^[Lu/<.%9..TB......q3G3)(.....$.$V.47/...8./...>...s.
.3..'1..S! .......3]'.=.;.&.z..%.".y.(*`.,.Ot......$BD...]K...d.m.t.4.
.PC.^.r..5. <.^.....D.}...c..y...=I~..G..k!.. .$sWF.j]Z....%.X....A
.s.d.....|W...'.N...3.5...0@. @..(P......E......}..Aw...);I.A...D.)...
..9....CJ..E........VI>#.Z......,I.qv29...w..G.I.._Q.H......v[.HI3.
.......#8e....Q;G...........p.8.e.....?.~..!.....w!F..wA.(.....X/3....
....k..~.......E4S.H..w.B\......bx!j'9...g.{.O.....&K2M.L.......=..)..
....mYv..;.........h............^.t..&Kh.^<Td..%..%...>).y...B@.
x.M..*0..A....9..x....K.9..N.Q....J......E.g3h4.....N.f..)Am.].V..I(..
..8.2..4..o..R..,N..m..m.x.1...s.2s.e....:!^.L...j....*...k(.S.....`.Z
%.p....7.).I.d..U...p.v.V5F..........kuZ.V....u1.H.A.UI...1X.!;%M..Jqj
iQ..#...A3...66V....C.p.....p.......f...4T...;....RX3..a....Zq..gPG8.s
.AYX.vnG..=....u....d.}g..bf...^jq..Y.....8!.]..F...Z..k.K-..o..WJ....
.1...p..j...!.dp. M..H...%...j.g...B.i..SG..B.:px..AHxQ........Xa.
<<< skipped >>>

GET /newstyle/helpidc/images/icon5.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:25 GMT

If-None-Match: "55f637aa8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:22 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon5.png

Last-Modified: Mon, 01 Sep 2014 02:37:25 GMT

Accept-Ranges: bytes

ETag: "55f637aa8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/t_bg1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 29 Sep 2014 00:33:50 GMT

If-None-Match: "eccbff97ddbcf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:22 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg1.png

Last-Modified: Mon, 29 Sep 2014 00:33:50 GMT

Accept-Ranges: bytes

ETag: "eccbff97ddbcf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/host_deposit_img.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Length: 13136

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/host_deposit_img.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "99ca6fab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...G...m.......|O....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:3DD67058CA9D11E2A79CA924
4D0C1859" xmpMM:DocumentID="xmp.did:3DD67059CA9D11E2A79CA9244D0C1859"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3DD67056CA9D11E2A7
9CA9244D0C1859" stRef:documentID="xmp.did:3DD67057CA9D11E2A79CA9244D0C
1859"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..-.../.IDATx..}[...u.........<.../.)..l
..%[email protected]^....=.E..Kb..E..(.....4E....4H..qR........DR$.;yx.s.33.m..
....m.!).G.......k......._...._..0|.).<.d<.l..}5.L.... ..Z..G.=H
'..V/.....,`Ye0....(..T>..d....y....By.[....k......_.J.....x......V
,.$.a.KG..d.........8...t..[8v6<t...HF.'.X...V......'I4....t|...hw}
.w............o.........RH.A....p..........//B..Bp`..d.."...!..B..TY.E
.gy..y......^..qQ.8U"NR.G._....."..o..H..x2....Q...*O.,/.".#....Ex...G
.....~. .T.}..J.....A.A.0.9........@,..<...d.~..<H4@.&...r>..
.......W..n...x....A......H........o|........2.P([email protected]..\.
<<< skipped >>>

GET /newstyle/helpidc/images/sosuo_bg.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Length: 4386

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/sosuo_bg.png

Last-Modified: Mon, 01 Sep 2014 02:37:08 GMT

Accept-Ranges: bytes

ETag: "44466da08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...............kG....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/news_dian.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 930

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/news_dian.png

Last-Modified: Mon, 01 Sep 2014 02:37:09 GMT

Accept-Ranges: bytes

ETag: "e35bea08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR..............J".....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:461204E7C8FE11E2B824E240
0A21FA8C" xmpMM:DocumentID="xmp.did:461204E8C8FE11E2B824E2400A21FA8C"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:461204E5C8FE11E2B8
24E2400A21FA8C" stRef:documentID="xmp.did:461204E6C8FE11E2B824E2400A21
FA8C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.L.k....IDATx.b......L.0.`....#P.JC..T....I
END.B`.....


GET /newstyle/helpidc/images/list_icon2.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 1276

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon2.png

Last-Modified: Mon, 01 Sep 2014 02:37:10 GMT

Accept-Ranges: bytes

ETag: "d723fa18dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:06E9D31BC90311E28786BBF2
C04E2D8D" xmpMM:DocumentID="xmp.did:06E9D31CC90311E28786BBF2C04E2D8D"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06E9D319C90311E287
86BBF2C04E2D8D" stRef:documentID="xmp.did:06E9D31AC90311E28786BBF2C04E
2D8D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.1N....pIDATx...=K.A....5."h.AP.....&!...4.
.V-.;K..?....F..".......N.....Z)H|F&...x.<,..........;.(....:..G...
.a..?..3........%..2D...&a..-&...6.7.L*..$..V. ...K.\....._p.o0.=..%.I
FE.I..aT5i.7.dmQ..........:`..-{z....S......h...l..E.X...h....?N......
6..=.09.qh.....j)m,S<@.....Ze-F;.......'...b[.}.M.5t.l.......aA'...
..L$.E^.z..EZ....5..0...~)hF3K....1.G..6...;..Op.{R.-.o|.0.&.K..%.....
.IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/list_icon4.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 1265

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon4.png

Last-Modified: Mon, 01 Sep 2014 02:37:10 GMT

Accept-Ranges: bytes

ETag: "26ae8fa18dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:153AE3E6C90311E29BBDCB57
59D56BB5" xmpMM:DocumentID="xmp.did:153AE3E7C90311E29BBDCB5759D56BB5"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:153AE3E4C90311E29B
BDCB5759D56BB5" stRef:documentID="xmp.did:153AE3E5C90311E29BBDCB5759D5
6BB5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...P...eIDATx.... .A...}..(..:.B.:.....$Q{.
.........(Q..gi.X.].7..$......O=M....z..>3.ivf..x..1.A..G.....[(...
 ..t..v.b..."fQ.....ld`?.cB...\F..A..A}&}.....ma...4Y~..E........[...r
.Of..3.W3....`.......-.kK.BWBP^..b:.d..d-l-..>.......)v.S...:...M4.
.Wy6..:....::0....'L........ a.}..l...3t..K....8........:.[...9....-..
..Z{.(.......8K.R.....~....WjK..P......n..^6?...]jJ.P6\.....IEND.B`.font>....
<<< skipped >>>

GET /newstyle/helpidc/images/footer_img1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 4240

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_img1.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "1f669fab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...L.........j.z.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:97ED5770C83C11E2AEDDA802
B6E9961B" xmpMM:DocumentID="xmp.did:97ED5771C83C11E2AEDDA802B6E9961B"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:97ED576EC83C11E2AE
DDA802B6E9961B" stRef:documentID="xmp.did:97ED576FC83C11E2AEDDA802B6E9
961B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>7.B.....IDATx...ytTe....&.../[email protected]
..# ........GD.V..PQ....h.1l}.h.I.A.d....['.NBB.JRU....w..-G.u...s..s.
....}...{..}.[*I... ...'.*......>..f..[.....T`.G.(=....sd....= .>
;3vO ...J......h.).{.1. 1...5......G.A~qhT..5H.>...Z;...h..9=.....&
gt;..;R..~~*.L......-......U.py..?.B...l.V.~..4N..[.i.4X.$vI\....r...]
[email protected]..... >.&.%...j....8zF..}.\.......
...>R.f1.g6zu..n....R.vn.....a..1{..T*...L...../w..A..'.....,.r.*..
..K .>.~...(/".g%.h..qc.Z1...1-.H...y]...qdY/.z....Jn........3...:.
. ...^.~....x..a".q.3P.......3......IZZ.&....'RVV..k.hkkc.....=...
<<< skipped >>>

GET /newstyle/helpidc/images/footer_img3.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 4575

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_img3.png

Last-Modified: Mon, 01 Sep 2014 02:37:28 GMT

Accept-Ranges: bytes

ETag: "44a0ccab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...>.........Sb......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B4502527C83C11E290B9C
FAE1B443E65" xmpMM:DocumentID="xmp.did:B4502528C83C11E290B9CFAE1B443E6
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B4502525C83C11E
290B9CFAE1B443E65" stRef:documentID="xmp.did:B4502526C83C11E290B9CFAE1
B443E65"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>.......SIDATx...yp....?.si...4.eK.eY2.e.
..;.......8.a.l....f7........J..).M.T(...c....6......-d..uK3.IsHsw....
c...2USjMw...}..........pd......I.....7N...C.0*ifT.R......o..b...E..A:
........i.......oX.'.z hap<......!.....G..8~....#0....D|`.....]P.OY
Q...B*...Y%..yxg.Q\...".3.i...._..i.(.r.x....w.z*'2...).4ND..4Ng..[.J.
.*.=.].v.`..Qp...\.HN.U..6I}.x$0.7...z^}.....?.............x.<.....
T<..c.aw...I%..V.!-HQU9...P..., ..q4.....#.X..b."..72E,e.h>v:..&
gt;...(2E:...M.xRH...m..h..*q.j...p .S.m._...O...E..LN&...V....<G~.
ZZ..>...7aQ......VMsPT......T.....3(.t...I..........R.q.k.H,J..
<<< skipped >>>

GET /newstyle/helpidc/images/fdj.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 3800

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/fdj.png

Last-Modified: Mon, 01 Sep 2014 02:37:09 GMT

Accept-Ranges: bytes

ETag: "71485a08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR... .................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/news_dian.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:26 GMT

Content-Length: 930

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/news_dian.png

Last-Modified: Mon, 01 Sep 2014 02:37:09 GMT

Accept-Ranges: bytes

ETag: "e35bea08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR..............J".....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:461204E7C8FE11E2B824E240
0A21FA8C" xmpMM:DocumentID="xmp.did:461204E8C8FE11E2B824E2400A21FA8C"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:461204E5C8FE11E2B8
24E2400A21FA8C" stRef:documentID="xmp.did:461204E6C8FE11E2B824E2400A21
FA8C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.L.k....IDATx.b......L.0.`....#P.JC..T....I
END.B`.....


GET /newstyle/helpidc/images/list_icon4.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:26 GMT

Content-Length: 1265

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon4.png

Last-Modified: Mon, 01 Sep 2014 02:37:10 GMT

Accept-Ranges: bytes

ETag: "26ae8fa18dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:153AE3E6C90311E29BBDCB57
59D56BB5" xmpMM:DocumentID="xmp.did:153AE3E7C90311E29BBDCB5759D56BB5"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:153AE3E4C90311E29B
BDCB5759D56BB5" stRef:documentID="xmp.did:153AE3E5C90311E29BBDCB5759D5
6BB5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...P...eIDATx.... .A...}..(..:.B.:.....$Q{.
.........(Q..gi.X.].7..$......O=M....z..>3.ivf..x..1.A..G.....[(...
 ..t..v.b..."fQ.....ld`?.cB...\F..A..A}&}.....ma...4Y~..E........[...r
.Of..3.W3....`.......-.kK.BWBP^..b:.d..d-l-..>.......)v.S...:...M4.
.Wy6..:....::0....'L........ a.}..l...3t..K....8........:.[...9....-..
..Z{.(.......8K.R.....~....WjK..P......n..^6?...]jJ.P6\.....IEND.B`.font>....
<<< skipped >>>

GET /newstyle/helpidc/images/list_icon3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:26 GMT

Content-Length: 1291

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon3.png

Last-Modified: Mon, 01 Sep 2014 02:37:10 GMT

Accept-Ranges: bytes

ETag: "9e74da18dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0E716CD5C90311E2919AA0A2
EC0A47BC" xmpMM:DocumentID="xmp.did:0E716CD6C90311E2919AA0A2EC0A47BC"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0E716CD3C90311E291
9AA0A2EC0A47BC" stRef:documentID="xmp.did:0E716CD4C90311E2919AA0A2EC0A
47BC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...Y....IDATx.... DQ..q3....d.H3......lD2.X
PR.VR...[.e.&R......Y......."..=z...9.O}........sO ...XJ].F.........nL
[email protected].`.Y=..kT7..!f...3(.$J....Mz......2.,.g.E..Qi..c.m.&..?
{..U.....v.jK..^-.x......x.p[...E......'Q.......?.:.m.......X..,`....o
.t....3Z1...8z....m.(!o...e.u.U..cp..rsD..;z..d..vo1..d...,..j-!...UA9
..J6]~5.W.b.. .W-.^..~....d.._......r!Sq./..QVV...h...H..!6p S.W?.....
[email protected]`.....
<<< skipped >>>

GET /newstyle/helpidc/images/footer_img1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:27 GMT

Content-Length: 4240

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_img1.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "1f669fab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...L.........j.z.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:97ED5770C83C11E2AEDDA802
B6E9961B" xmpMM:DocumentID="xmp.did:97ED5771C83C11E2AEDDA802B6E9961B"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:97ED576EC83C11E2AE
DDA802B6E9961B" stRef:documentID="xmp.did:97ED576FC83C11E2AEDDA802B6E9
961B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>7.B.....IDATx...ytTe....&.../[email protected]
..# ........GD.V..PQ....h.1l}.h.I.A.d....['.NBB.JRU....w..-G.u...s..s.
....}...{..}.[*I... ...'.*......>..f..[.....T`.G.(=....sd....= .>
;3vO ...J......h.).{.1. 1...5......G.A~qhT..5H.>...Z;...h..9=.....&
gt;..;R..~~*.L......-......U.py..?.B...l.V.~..4N..[.i.4X.$vI\....r...]
[email protected]..... >.&.%...j....8zF..}.\.......
...>R.f1.g6zu..n....R.vn.....a..1{..T*...L...../w..A..'.....,.r.*..
..K .>.~...(/".g%.h..qc.Z1...1-.H...y]...qdY/.z....Jn........3...:.
. ...^.~....x..a".q.3P.......3......IZZ.&....'RVV..k.hkkc.....=...
<<< skipped >>>

GET /newstyle/helpidc/images/footer_img3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:27 GMT

Content-Length: 4575

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_img3.png

Last-Modified: Mon, 01 Sep 2014 02:37:28 GMT

Accept-Ranges: bytes

ETag: "44a0ccab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...>.........Sb......tEXtSoftware.Adobe ImageReadyq
.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:B4502527C83C11E290B9C
FAE1B443E65" xmpMM:DocumentID="xmp.did:B4502528C83C11E290B9CFAE1B443E6
5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B4502525C83C11E
290B9CFAE1B443E65" stRef:documentID="xmp.did:B4502526C83C11E290B9CFAE1
B443E65"/> </rdf:Description> </rdf:RDF> </x:xmpmeta
> <?xpacket end="r"?>.......SIDATx...yp....?.si...4.eK.eY2.e.
..;.......8.a.l....f7........J..).M.T(...c....6......-d..uK3.IsHsw....
c...2USjMw...}..........pd......I.....7N...C.0*ifT.R......o..b...E..A:
........i.......oX.'.z hap<......!.....G..8~....#0....D|`.....]P.OY
Q...B*...Y%..yxg.Q\...".3.i...._..i.(.r.x....w.z*'2...).4ND..4Ng..[.J.
.*.=.].v.`..Qp...\.HN.U..6I}.x$0.7...z^}.....?.............x.<.....
T<..c.aw...I%..V.!-HQU9...P..., ..q4.....#.X..b."..72E,e.h>v:..&
gt;...(2E:...M.xRH...m..h..*q.j...p .S.m._...O...E..LN&...V....<G~.
ZZ..>...7aQ......VMsPT......T.....3(.t...I..........R.q.k.H,J..
<<< skipped >>>

GET /newstyle/helpidc/images/bottom_line.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:27 GMT

Content-Length: 949

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/bottom_line.png

Last-Modified: Mon, 01 Sep 2014 02:37:04 GMT

Accept-Ranges: bytes

ETag: "fcdaf89d8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............69.|....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:891FFCCFD00D11E28D4FC778
CC3B6AE0" xmpMM:DocumentID="xmp.did:891FFCD0D00D11E28D4FC778CC3B6AE0"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:891FFCCDD00D11E28D
4FC778CC3B6AE0" stRef:documentID="xmp.did:891FFCCED00D11E28D4FC778CC3B
6AE0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>7.0....)IDATx...1..0........S.....$....7m-.
... ......K.......IEND.B`.....


GET /newstyle/helpidc/images/nav_hover.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:28 GMT

Content-Length: 2863

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/nav_hover.png

Last-Modified: Mon, 01 Sep 2014 02:37:02 GMT

Accept-Ranges: bytes

ETag: "afda749c8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...b...(......f/.....pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /pa?p=1:200899589:51 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Server: tws

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_111.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate
0..

GET /pa?p=1:583650000:51 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wpa.qq.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Server: tws

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Location: hXXp://pub.idqqimg.com/qconn/wpa/button/button_111.gif

Pragma: no-cache

Cache-Control: no-cache; must-revalidate
0..

GET /newstyle/helpidc/css/basic.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:09 GMT

Content-Length: 635

Content-Type: text/css

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/css/basic.css

Last-Modified: Sun, 12 Oct 2014 04:22:27 GMT

Accept-Ranges: bytes

ETag: "80433521d4e5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
..........tRAk.@.>7..0loe.M.5vg/-.. .T.P.L2...d&.L... ..z.<.^...
x(....i{./8.f.JmB .}...}......q.UA5..:..:..Y^..;;...........u6e>Rl.
j...=.[UUw.... .......xD..i.:.'......i}...M^../....h.:Q.8..e..Z^..|.G.
.......T...?.....a.....~7...p..Q....c.Y...)2F~80f......\j9Xp.g.C..$...
..%..C.`..t...0....LC. ...2.0....d"/5..PcE1......RS..H..m ..01D.U.AC\Z
"..8 .W...HHA/a..-.IE.2-..<.......TX3)f....R..0...H...g..P......?].
{y1}.ik.T.P5.'.~...M.R...K&4U...a...{JQ.b.{3..l(.9..J....n.........4.0
gC.bj9,.5....u..iZ........y....Mx#.K.....4..9.#..gf.m......92..7.....N
/..J........M.t......e..#.m..3..R[.f.-..t...|...zE.|...I.xI.mx......pB
..>na..3..JGt........


GET /newstyle/helpidc/css/footer.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:09 GMT

Content-Length: 543

Content-Type: text/css

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/css/footer.css

Last-Modified: Mon, 13 Oct 2014 02:56:17 GMT

Accept-Ranges: bytes

ETag: "809ef4291e6cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
[email protected]/Z.f...;..*.......df..d&;.4[.....z..S..X..P...
.WQ...i.....w..|....}...K,[..V..Q.n...o...=.X.]M.....\gW4G....!....}..
.CF....<..)..3..LQ.9.u~....O......?.>.N.....j.L.o...LP......kt..
....$H&....l.......x.....o8.BQ.p.A.e...D....<.RI.&.C......../.):N..
IlNjT!....Q3.....C.'[email protected]^X........n
..c..3.J.&6...NV.|N.V.U./i..!....m.....`...>.....X.;.G..M.../$..\..
Dl.t'. ..P.A(....(.p.uB.)...m..TO.k.K...u....LT.h...D.(..U.L(%jd......
.M.j.....:.5.`T.C.....&I._..0.u./..v......kH....u.j..M.=.....$...t>....


GET /newstyle/helpidc/JS/jquery.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:10 GMT

Content-Length: 32452

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/JS/jquery.js

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "80469aa78dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............kw.6.0.~?k..`qz;D...$....F.M.;..$.L.g...d..d3.A..}....OU.B
."'......E...B.P(.N.O.~.{-........>:..W.....Q..Eyu.gk.*y.........Z.
.P...=...O.d..iy..WK....y)u]....L....U.<....A..=..Z....q...}.i.d..6
.....X.T....v.....LD.T.'.T.J.............t.eq'.WiÆ/..]I...evYk.gl..k
....A.Q.).*.....R`...k.-&g...i^a...U.....&.r.E.W..e.z.e...-ng...._.}..
.I._..pQ.....!...K....{...E.....mQ..(SG....a..........N?|}..\.X....u.t
.jI=.`...%b.....~...I..G..Fk.....)./.f"..R.....A.;~A..6..)[email protected]..
......l.o.0...Ms.=E\|.hL3....h$.!....&.=[.y.q\..2.U...xX~.B.....xKh.%4
.t)F...t.fj.4.W.g.,......(6.".b........,..........:..$_k;..&b\..Z.2..u
..o`.? . ...deS...#..`=..........b.3?....KK,6...-V}..>[email protected]
;.6...M,g.......&.z..m..{[email protected].......?mL*/|@...ZT3y.."Nj.x.
K-...Qmr...,..4......g).x&..ZY.......N..)4K7.hFq..,Wl_..9>.........
?........2ue>...).-.i..hu|<......Y^.0. .1..i.G...1..JA.,Z.:`$...
,....._})d......w....k}...U^(.#.R&..1. .p..6....A!.$..$...::>~cg...
..!..mZ....\."7........q..5bR./l.|...P.....0.d...z\[email protected](.r..
T.......v..=.r..} T.a.8...)[email protected]@<_..g.Nw`jNDT .(Sr.-.L..y.._.
."..E.I.w......U..O.^o.....]...........~.iO................e....Rh...u
,..q...{[email protected].._N."....%#.Y.B.4SU..r.t..[.ggb...p
.BH.82.y...W.{....j..O......d.H..P...7.8....3...r3......'EPp$;d..(..'.
.J..3..`...x.1[......`...dl.....A|@$......D.....a.DQb...B...Pd$.o5.Y..
._Q..W......../....X....4...b..{..m.R.:[..9I\..........J.#..8...].....
<9C*2....x.M.....MZ^e.....G.j..'...<.\...W.YO.....E.....~.n6
<<< skipped >>>

GET /newstyle/helpidc/JS/jquery.imgScroll1.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:12 GMT

Content-Length: 1707

Content-Type: application/x-javascript

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/JS/jquery.imgScroll1.js

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "80469aa78dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........W.N.X..N.......r.@;...inzQi..{.&...I.q.....B.r..4..@@..thKB
.<..m;W. ..^[email protected]_.h./..'.........
.{....~.....#............#ODE.....PL..B...V..w^....`...........~..c...
.......ix.....D.q....r\.dIu;\...../.....s..N[-3.!...D.."Zl.....~..a}.(
,......3*.)N......U.......b.g...%B..8B.{/..X.D\...I.b..}>.&........
.[....O......m.......{..HFC,K..g....8.z...KFqB{?.V. .>.....9...i..6
._B..M.N...........}......W..3....jF{.._jR...s.,.....J......=.o..o..!.
..3?-Z..-....A.g.U[ .}38...=.y.J.....,Z....,h.@;(h3o..M....)........|.
ubc^/...;...#..T.P.u:..L..^,7c..)Z........O..y....`a.1Mm.....H...60c .
Mz.b....'..!.....fwH.6L...0;....Tm.F.7a.).......?..-#.7.O.Y0.Z.... 5.d
|<eh.....Q8..R.....MA...8.rTd..OC...-O.;SZf...IQ..! `:.F_.F..S9.2..
%$.8.O..HR...D......]...k...,..P.......N..4,("7.<.Nw_..].g.g4&...'.
4.Mj.8=FL..(...:.C..k.,Mo.}.......0.....yB.....6.H.(.U........Hm.'"F..
!.%O<.#=.k...rj5........h..P..6r.~j. 0.........f(.u...S6...f.>..
e....[3.k...\.U.n..m.....R...zV..[..jG..2..AH.Z..C .FT.bb[\.u.rD\..Z;.
...Uc..N...7_..5....a.a,..$LM...B2.$`.......&...g...l.........T.;].VK.
.E...m..5...w.|. ./.}..oL........a.....3Y.."1oNaD.I..w....$6.?*.q{.V..
..|..d.y...e:"..'HH..f...mC.&..Xt..R .0IF...l...hw..gm.LP..8....=B..q.
....]..AGk._...?l.......S....nV.,....."B.).;g..7.%.p?\..L......'...).E
..F1.8.B..[?.B.-}.Q.SK.}k.......J.k.8..v....c........P g~....I.._....k
.D&^.7.7..YK.Q.P..n.....M..=..H...;;.-.Y.^.PS.%......O.0Mk...=......W0
..b..........0.l[.gq......m..Mg...oy.',..N,p....o_.6.^..3.^.j'...I
<<< skipped >>>

GET /newstyle/helpidc/inc/index_login.asp HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: private

Date: Wed, 05 Nov 2014 01:07:13 GMT

Content-Type: text/html

Server: Microsoft-IIS/6.0

Set-Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; path=/

Content-Encoding: gzip

Vary: Accept-Encoding

Transfer-Encoding: chunked
a..............161.....N21...$.C.k".....`..1!...Tg........q...Y."&./q.
....c.@.$*.73m..=...Z.Ed3.Ms....^....H.......SKF.HFM"...........C#...9
02L..ZQr.Wx..<...b.8.g......%.r..qi..%..`._..u......s.m.b..c5tf`_f 
..p..,...>..\{.|.A......"......Q...v.......t..P.A..V_{7?LLJ\.9.Pf..
<c.J.!.!.L....M,oj.I............,....../p.:RL...T.:,7.7O.........|.
...F.z._........K,pH..9.co./......0......


GET /newstyle/helpidc/images/denglu_anniu2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:13 GMT

Content-Length: 1972

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/denglu_anniu2.png

Last-Modified: Mon, 01 Sep 2014 02:37:05 GMT

Accept-Ranges: bytes

ETag: "4f7b9f9e8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...<......... U.....{IDATx..X[OTW....._.?.^....>
.-...n..e....X...T.M....)....8........p..jE..*..)&.C........sf.-)..u..
....8hdL....^tl"'...n<.C..M.Pl&d..>>)p....C<...%W.k<5..
x.96.5#.o&/0....L.X>...>-o./....0......;..5.......V.]..*......C.
......<...3..5W..fN .....>c.pN.c^..aGZv.<..!.xC.......5x...M.
......5...yc\........-..i3...h.S....a..D..t...Z.....o.-4.`s.... A.q.?.
c...c.O.5.l.W..6g;.....C.....~......1..s>.}R..'.t.. .y.4.fh.g3h..b.
.!...)C[L..R..#.r........a...<.\-..s~sA.g..~..[c.iQ. ..5..&.!qn.V?q
....~f..K(.z.Ns6...4.........ia..M{....d.......).y..g...DG..&...u..ZT\
..wm....D...v"I.=....f.........H.....Q3...8....m.:....0.g.]..#......6.
..........5.=...c.44..f....M...L...&_..B..5.~.8....4....x/.|.'.A..cp..
8..c.`....I.L=.-.|F3'...._...,..}R...,.........#.k[..7....4.>...g,.
.1f.....O.&......;d... q....=...V. .h<...g.7......R.}.Cz.(>.F...
u.....Q.U_...j...........9.....)..F..^S,.z.?..y..E^...........Q.gO....
~...Q.7..t.-X..&$[@.-............,2...0........N..[......<.......e.
..i|...X.0.w.:[email protected]...{[email protected]._..C...9....
*......'._e.. ......`.".0k...;.8...?.F....h&?<.....Y}.'..S.~.E|....
.0.`...5,{}../........t.Ly.......zC.....z*.. ....U{.}.w.:S...&~..b..D&
....j4.<.e.w...An.....y...@X,|.....fX....P..w.#yk.3.......`....y...
..b.#...[......w...#..:?.pA.8 .......u...ra.. ..(.R.|.{....j7......../
."...5..@..[w=...].&.z,...E.s..g^.P...V....[...`.H:-yq)`~.0b.n(......Q
...{....$.....>\.......8 .b..X*{...`....eZ.]d....W.<.$..>
<<< skipped >>>

GET /newstyle/helpidc/images/denglu_anniu1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:13 GMT

Content-Length: 1979

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/denglu_anniu1.png

Last-Modified: Mon, 01 Sep 2014 02:37:05 GMT

Accept-Ranges: bytes

ETag: "6c89809e8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...<......... U......IDATx....S.e.....@....._.._..G
.X. ...,.].Y's2 q.)..,...((...V....e.x.......MiS?..t.y........|...<
.|..y..........=8.j...$^.!..GVQl$..<......!.C}...e.Q7..l...Y...g...
........U.............. ...?.i......i...Sv....U...kn.....{.]z.G.......
.1...dx.rz1gt...<.5J.v.ewL...S...,^?......&D... .2j!.O..>...!...
....T}..A.....]..,.yR....z...uI.......q,...8..2O..p.g..$...]=.f...9...
0W......<..#X.Im....s.8..&}....Xv...1.eh$.0h..Iqv.....e,..,.o.c/...
[email protected]'Qzu..z6.....z
A.k..T...L...l...l.I.s.A`.u.p.......Z...x.VRgD..p..I...#(.4j...d.0...o
.,Y..T>i......t.z....Iu...8|1..-F.......O.....&.....<...../....q
`j%.F..<i@=<[email protected]^..[..........p..K.....P
.!F.3..L,.....#s....0.?.P-..I.8.3.h.....>....gOA>.,JZ{.W.>.A.
1....,......?..p. ..n.[Nd...w.h>o...c.#...;0..O>...?.....d{#.[..
3../Q...4....~...n.ZGyTu.?........\T.....?.!c.K..Dt}.....:U.......J.}.
......j..J.......z.F.....W].d.l.f../..........}....}.[g.zpV-..........
Y..... U...W.f..`.EU..n....m....Z......7....}...^.......k..G=N]......w
`!.......t.i-...y...>.....d...e'.i.....&.y.>.`..^.c.wc...,4.4...
.......J~en?....D..!.J...w.V.....:GM\.?......g.'..Z.Y.~...............
..w.......<.....wv6L.1....._.....A...).......wL....u......>./.|=
p@..|.....k.NE......0.R.6Mx..2.....[3 p....<....v....M...A.........
_....k..i.j7....W\d..........p...k..../R.......0FG..L>....Q.k>..
.'........Z...n.K..u...[....-Nt......c...e....u...w.CF............
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 1277

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon1.png

Last-Modified: Mon, 01 Sep 2014 02:36:58 GMT

Accept-Ranges: bytes

ETag: "f120569a8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............r..|....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:3159E860C8CC11E2A6509953
F02A5BBD" xmpMM:DocumentID="xmp.did:3159E861C8CC11E2A6509953F02A5BBD"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3159E85EC8CC11E2A6
509953F02A5BBD" stRef:documentID="xmp.did:3159E85FC8CC11E2A6509953F02A
5BBD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>q......qIDATx.t..O.P...{[email protected]"FW
'.._.f\...?t....L.8h.&.9.......;.."\r.....{.>^.<f1.W..z..OB.e3..
.#..J....G$..?.GFp.@...([email protected]^P..$...z.........Y. ...
......9..%.0&A..3..%>..........Y.3.....m.>.(b...M.......... L9.n
'....H.........)...N.X..C-..V..Yj..:.h...X...B.[)g..J..<R....l..c..
......T..^.X"h.2.....eq....... ...R...).5..6.|...D|..o....j.4:.......8
...&.v.....IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon7.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 1217

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon7.png

Last-Modified: Mon, 01 Sep 2014 02:37:00 GMT

Accept-Ranges: bytes

ETag: "a938259b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............Vu\.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A4632F8DC82511E285ABE925
653BA520" xmpMM:DocumentID="xmp.did:A4632F8EC82511E285ABE925653BA520"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A4632F8BC82511E285
ABE925653BA520" stRef:documentID="xmp.did:A4632F8CC82511E285ABE925653B
A520"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>i..,...5IDATx.b<...s...{...o....03..v.wa
..E.)....Q. ........$.v........._../~.........*^..V..........^...._..K
.r`.LH&]...O^.q..e>....W ...........7..T......).....T/..........i`.
..w....|..}[email protected].....*_....(..U......\.S...I[..
../....!{d..x...]{....q..H.H-H.. {.. -..?....s.. .Z...@|...,."..... ..
..y.o.-U....IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon11.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:14 GMT

Content-Length: 1079

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon11.png

Last-Modified: Mon, 01 Sep 2014 02:37:01 GMT

Accept-Ranges: bytes

ETag: "8174fb9b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............b.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:E3D5B8F2C82511E2B334E982
CBFA6754" xmpMM:DocumentID="xmp.did:E3D5B8F3C82511E2B334E982CBFA6754"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3D5B8F0C82511E2B3
34E982CBFA6754" stRef:documentID="xmp.did:E3D5B8F1C82511E2B334E982CBFA
6754"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>>.Z.....IDATx.b9.....8....2.] .H/.B....`
.*..b\...3.xKw}....q.`.3Y..q.. .3.d..|4..B@,[email protected]...?.......f.F_..
C...d2....4......g..n$##....._j*._e.......R_.8....)........#h.?....0.%
\]...D-....IEND.B`.....


GET /newstyle/helpidc/images/ico_tuijian.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:15 GMT

Content-Length: 584

Content-Type: image/gif

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/ico_tuijian.gif

Last-Modified: Mon, 01 Sep 2014 02:37:22 GMT

Accept-Ranges: bytes

ETag: "0dd32a88dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
..........\.QLRm........."#...'S{.8..i.......U./hsD..pe......@....@.\.
...-.A..C.U.J..M...7nQ\.u....?...w..BU.M.p...d. ..h.........;.=.......
!.Bd..>D.`f.X..d4 [.P#.^.YOq6.d......(:....0.0b.wE.T....*..i.Q./,..
....S3...X....CELF.~....XC....?...z.'.`].i(......$.<i/.......Oc9.].
[email protected].....#........a.Ac.q.k.9.of.....OM.?5...,..
..B.......t. \\.._^.J.............X|scsk ...}....K'.....JSB.t..U*`...i
.7...q.?j.3z....8.J^>....k...[.D..Jf.I.....Q.T.[.U..C.}...;U.Uwk...
. ..I.m..6{...$..5gT.p..Q.....I.{......p..w....`.t.Z.......0...#.._V.X
....o....$......L...A......>4-.......


GET /newstyle/helpidc/images/daili.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:15 GMT

Content-Length: 16686

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/daili.jpg

Last-Modified: Mon, 03 Nov 2014 08:04:37 GMT

Accept-Ranges: bytes

ETag: "805898cf3cf7cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
.............TS../..)U...4.H.E:...z Ho... R.C  ]z....H.5..TBoJ....w...
.;.w............5..o.5W..s.....o.. u.:[email protected].
.!....#....................L..jigo'....j.................R.T.....O...8
d.S.8..;.8..8._q..p...[....s.......="...;8..w.p...........Q.S.. .<.
."d...y....]..35x.'...g.=..4.t.....yx..%$..eTT..54. }.C#c.S...........
... ......Q..c.).........E.%.e....M.-.m.._z........'..gf..1...b..76...
.......>.............>w..p.........:)..Y..(....<.....K..._...
.(.'.....C......M..i..L...K......... [email protected]..;[email protected].. ..S
q....4$4.:[email protected]....?.X....v..Ew...^..T*I..j......g./.$....n....Q.
.7QF..H.....v..............:.%o<.&......M.{..O..._W..n..7.u{....&..
.......x..@@....pCx.7<.06v,S...9.}...Y..ll.}...'.nRW|...LE........y
.D.w>.`..i.u.%eItY...B..I....=...z.I......I.E..?..q.BOJ........b.~~
......3u..j....l..76S.......nw....EXH^19...uu.<h...E.%.k...vj......
 |........a...|.k.......5..#.L.9....T.Xis=.........Q........9...y$v.`V
^~<....(..<...M<[email protected].!....\..S(.m...i.....Uq.S.d...
..N.}..{t....H.....n...!..<.../.s..V...5..CR.....Fq.,......\a..em(F
.l.................5..E..{..Kl?.XDLY..U.. .y....Q..........}...r..f5..
n?O.n...*~.GPl.s8.$.K..c.8.....K......Xz......Y..I<x1.E.4..h.....H.
.)x..W...09.....@?!6=Aj:._.o.%[email protected]........{U..c..N.e..f[}.
p....o......g..j.:)aH...#.....RwZSS..3..l..j.:..Ka...J.....bE)....J{..
DCx..$?{.m...yz.t...`.....o...2...>.Y....3........5...x.!9.U[......
X.U.. ..?...rA..7Hp8..cj$F..............wJ...%.........R........DH
<<< skipped >>>

GET /newstyle/helpidc/images/snav_icon1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:36:58 GMT

If-None-Match: "f120569a8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:16 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon1.png

Last-Modified: Mon, 01 Sep 2014 02:36:58 GMT

Accept-Ranges: bytes

ETag: "f120569a8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/snav_icon5.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:36:59 GMT

If-None-Match: "42b6e99a8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:16 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon5.png

Last-Modified: Mon, 01 Sep 2014 02:36:59 GMT

Accept-Ranges: bytes

ETag: "42b6e99a8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/snav_icon9.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:00 GMT

If-None-Match: "af595e9b8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:16 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/snav_icon9.png

Last-Modified: Mon, 01 Sep 2014 02:37:00 GMT

Accept-Ranges: bytes

ETag: "af595e9b8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/nav_bg.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:36:57 GMT

If-None-Match: "1af092998dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:17 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/nav_bg.png

Last-Modified: Mon, 01 Sep 2014 02:36:57 GMT

Accept-Ranges: bytes

ETag: "1af092998dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/index_gaidong/ltitle.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:17 GMT

Content-Length: 4362

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle.png

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "2eafcaa78dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.....................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/index_gaidong/ltitle1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:17 GMT

Content-Length: 3540

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle1.png

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "8afaa6a78dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.....................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/icon5.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:18 GMT

Content-Length: 2080

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon5.png

Last-Modified: Mon, 01 Sep 2014 02:37:25 GMT

Accept-Ranges: bytes

ETag: "55f637aa8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:E3C378E2F80311E29483B0B7
EF175705" xmpMM:DocumentID="xmp.did:E3C378E3F80311E29483B0B7EF175705"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E3C378E0F80311E294
83B0B7EF175705" stRef:documentID="xmp.did:E3C378E1F80311E29483B0B7EF17
5705"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>*.x.....IDATx..VkL[e...u-7..v.,u.%.....!?..
....0A..R 8.......YB\[email protected]... mi{|^.}.P..N.....
.<..>..>.Bss.....{..<......tg.J.1....;;;........<%.D...
.fS...P(....[[[.x<..^....'1t..E.^...>_599.....)......*{".....v..
.|_....#...G\..X0.....y...DR:.*Pa._J..U......Y.. ?...yVVV.]"v.=BSS.3t.
.....k..7......(...._...>....4a.hcc......O..H"..........`Lo...[__.J
..4.......n?.n.....T*.......*.Qzlll..........gdd.M&.........aN).....{.
.h.#.U.CE..... P..!.M.....B$...@/........PD..r.B...K...n.|.)[email protected]..
.......Z......g...(Q*//.g4.....<|,...rfnnnA.>...FE./......#.
<<< skipped >>>

GET /newstyle/helpidc/images/index_gaidong/ltitle.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:18 GMT

Content-Length: 4362

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle.png

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "2eafcaa78dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.....................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/1004_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:18 GMT

Content-Length: 11665

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1004_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:23 GMT

Accept-Ranges: bytes

ETag: "8073cba88dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............eP.Q.-... ......!X...w.k [email protected].'@...n..{......q
...9u....ZU..y^~........(((.......P..........0.10..1p..0..q...p....I..
........._........$'.$!%#.......t.....R.<....z...c....h(..Tb.4b....
............:&.*.6..h .......m,,\t..4......L.&,........)8d,.^....T C.T
V!.[o0..n......[..?.g.f..;........5.............X..X..%F'a.....|i.BJF.
...ZX7.."...K...?.`{c..{.6....O...*...._<4b.,.oQL.Z..0.T.A.....OXf.
...f8...'...yO.........tx..).q...~.?..F.<.O8].4k\-.... ..~n......m.
......uO.....N.S.._....0....8v.|...7 ..0\ .W.....T...ucSy.o. ......N..
I...}.W.u..${.......P.......}..S..cy.....J........A...K.....3....X._..
...%.|NF0..Zq..Su.).A.qJ...5.W.Z.Z>1......|/.U...V....f.......r....
..6.X(V..].r4=...C.w...y.......<I.......=...[.....wf".... \..l.W..K
..KnBV.v$.V.....O...5.'.....e...).~..d...ujp...j.;;..b....H7~..@:.....
>.Tm..l.I...=.X.......4E..m...f..C. ..3..-0_W.Q..L..d....#.?f..f.GO
O.q..l.j,L.b.b........\..).I...xf.......6\...jX-..)......O........'..i
73..d..i...ts.L.......t....ah...ddv.....i....x}..!..%...F..&.kj|~,...L
.N.xnq......I.....Hz..9..o..R.(../m.&D,L.=.LQ3.:.7H2...... ....~.l_Q..
.^n.i...!...6..L4}.R.H.6...&.F../g}.H..=>..^..^{....4v..o/.r..q.&;.
.]W.X:Ll.\.h.........X..a..|.Bc.f.......B3a..7.E....m$.T.....zA%vt.|v.
r..#....<\.."[email protected].!J.....0F.z.B....#...j......-..>....c%..
h$.........h..U..l.Z.a.}.c%$00l..gn..$.A.\I..m.~....{...]....9.U5.n<
;..2`....6.h.E.1......yr.....}.a.C....h.4Uy.$IG..srp.k...P...s.....sy.
:.k../<^.. ....l8....%.I......'...t......^............e....v...
<<< skipped >>>

GET /newstyle/helpidc/images/index_gaidong/ltitle1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:19 GMT

Content-Length: 3540

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/index_gaidong/ltitle1.png

Last-Modified: Mon, 01 Sep 2014 02:37:21 GMT

Accept-Ranges: bytes

ETag: "8afaa6a78dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.....................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/1007_s.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:19 GMT

Content-Length: 10219

Content-Type: image/jpeg

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/1007_s.jpg

Last-Modified: Mon, 01 Sep 2014 02:37:24 GMT

Accept-Ranges: bytes

ETag: "0a64a98dc5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
...........se\.a....N..Rb..;.......FiiI..A..Cja....AJ..PJ....{...~.3..
0s..y>.........S.@ .............'..._....`c.................?$!%#%"
zH.....%%%..j.*..r.J.......`.....P...P..... ....d,...&.a...{.F..ac....
............U.. ,06.?sB\...?6.....\rf.G..)X...,.(.'....#..?.V..P..".R.
@D.<BV..B......1...c.......8.x.........9...c..._/2l.r.G.Z..,.)Y....
G...rW..........t.......`2,2..P.....f..II.l.......t..p...OZG..B..6...2
i.U [.B.x.-..../..t.....-.i....\.E..g..\.X:...,|A...>.Y8$<.8|.~.
.....9'....|5.........0...Q..LLk.)B?.....t.[....,.........g.s.sN.w.o.}
....8.... ...x.z%u.............%....r...(K.fHJ....C.Q......o1&..E...:.
...[...b_d7S-.Z,.[...v.sm.....Wd..}IS,....mS|....b.._U.......gmW.....{
` .z.......E.S3.r....B6...cS......#>...... .s}and....k...YN........
M./(e.| [email protected]....\.w;.....sG........[.v""$~.$..|N.
..Y|.m..b.j.1....aW..&...xh..[...j\[email protected]..~..
b.....i{.$...;&..8U.....n.".....-.B.V.cYff....6RKL..........`zc.~9.=..
..N..*.1....\R..t....4<:.<.Z..>.0}.M...I.=..2..a...$t.a..7.k.
.F.K..<tX.....eI..I.....`.3.f..?n.I.......$.~. ...E.......[fu..=...
b.]..:....4).....J...l9..{......#}........7j.s.KP.... Y%.FH...r.....&l
t;......)h.Q........l..L5L....?xS.....O..BIi...2..&....Q[.s...F(.`.ukJ
..s'R.....A.<f.p.}..`....t..n.<.u.,.n.f...L...2yy.Q..W.. ..g...(
...~....,|o.BOb....Y^.\.Y.(N...=..4i.<.{7. lf.......v...n.$p}.u./;d
...{R..."7..=.m.x..2...Ul ..I..1....R.([email protected]._......tE...
\up...J...B..3u.g]......m.....|4*.HN..H...*p.f....\...M^._J6F$"...
<<< skipped >>>

GET /newstyle/helpidc/images/diy_img.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:20 GMT

Content-Length: 6616

Content-Type: image/gif

Content-Encoding: gzip

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/diy_img.gif

Last-Modified: Sun, 21 Sep 2014 13:08:58 GMT

Accept-Ranges: bytes

ETag: "0913c349dd5cf1:b24"

Vary: Accept-Encoding

Server: Microsoft-IIS/6.0
............y<....?.>.7>F..5s...Is.MK.J.}3D*...J..7..H"...F*.
--G.h.Ha.N.~....z..^....2...#.F.~...D".j.X.... ...o.|....V...%.$.U..w.
........................O...?...k..c......S..u........Y..w..j[?..%...|
...}.........{#)=_...>R .).Hm}[.<R.q......z....Y=.9..n....s.....
...k_..M.y=...hI8..}@3..~..}.E.bx.S .R.....N...?.^~.6.c..c...$o.S.....
....p..8...?...'..Z......wk .k.....j...n.zD=.A.oQ.jW..PO.<.......k=
......bF.7..k.)Y...|;........^..G..^...a>.p.fd@;.......o..wK.4K..JG
=V<.....|..z..K..W..=..>....v.A.@`;.......-..3..w...w.,......lC.
7"[email protected]..!-hV.6.......>....,.j..~H.iW..P..<....N._.
X.................7...@P#....>......j.Ev..Z......xp.<[email protected] 
.:..F0.......1.m..zlt.b.3...f)m..zm...z9Y.j.....: ..d5 ......s....;R.i
......)........&...l....S_..vh].V.......W".....keu.......7..P.<.e&l
t;.w.m.K....ok.>,....y?W......S .S...H>K.................^......
..0....b.......Z6h..fU...YjG.=..*....u....-V.T.G.X..N../...z.oUW.../r.
...l....rzs...Su.5e..l-x.......[,@..n.Yw.T.<......h...":.q.....7D&g
t;.FiQ}.........g~<.A..>pX.T_S......[q......u..G_Sb..U..5..lo...
r.a.$..LS.'..gM...._....3;. ..e..8.....'.X=UnW...O>.xO=.?....(dE..%
.......-...mf...J{.$P..<..^P..VN.7.....i.....r...../D.wW.}.Q....Sn2
.......n.:.|....6..b....R.......:.b.]Vx.~..*].,.Z.yZ)..=.L..]T.jc n<
;......j...._.....O'".c^...Q.`.'&l........AK..6..I.N....U.{....2......
...........;o........ N:\...JvP>...5..M...g&.mj.$5.I...YZ`..t&H.[S.
.Z..p0......f...0JC=.h.#4.[..9.o.'...].......k....f..Z"g..h..^...S
<<< skipped >>>

GET /newstyle/helpidc/images/t_bg2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:20 GMT

Content-Length: 3142

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg2.png

Last-Modified: Mon, 29 Sep 2014 00:40:00 GMT

Accept-Ranges: bytes

ETag: "6ab0c9e67ddbcf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......A.......8]....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:F6D7D7231F3211E39FF0B83E
0FCDD021" xmpMM:DocumentID="xmp.did:F6D7D7241F3211E39FF0B83E0FCDD021"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F6D7D7211F3211E39F
F0B83E0FCDD021" stRef:documentID="xmp.did:F6D7D7221F3211E39FF0B83E0FCD
D021"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...N....IDATx...{PSW..s..I..G ...$.!..*>
@.T..J....k..q.?g.....tw.;...l.G......uW]...T.<D|.....@..@.........
v.^ `.x....._........|..7.s.\[email protected]..._..hm0.......H=".*".
...#.**.....Nm1R0..R(.j..c..6.K....6~...pR./Y........I7$.2.J....N.....
...t?...........&.%..1.|.]. ...~.P........(....fJ62..o&......7&...Z`.x
.".^z1c..-..H.]...q..A.....L.G..Il...6W`=..-.^..)..x.^...v nQ......qnz
....2z. ..e..n.....b..v...Yf....r..W#..:....P.=/..vO.(....6.......p.8.
...\.'..H.5`.e}FS....#..j.CG...h4&.I..).%.J../..m.Si....M......X...W..
.*A..1d9\[email protected]:..m[.*N,5...U)2..V.V.ue.2.Yl.....o.7.k......
<<< skipped >>>

GET /newstyle/helpidc/images/t_bg4.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:21 GMT

Content-Length: 3058

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg4.png

Last-Modified: Mon, 29 Sep 2014 00:41:31 GMT

Accept-Ranges: bytes

ETag: "60e0171d7edbcf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.......A.......8]....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:835F5BDC1F3511E3AC27F046
4B7A30C4" xmpMM:DocumentID="xmp.did:835F5BDD1F3511E3AC27F0464B7A30C4"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:835F5BDA1F3511E3AC
27F0464B7A30C4" stRef:documentID="xmp.did:835F5BDB1F3511E3AC27F0464B7A
30C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..ca...fIDATx....T....wgfg...2T$.!>1V=..
.m......S..Q bNc....G.jNQ.Py....%h......W...I{...v.V......kf...ncD....
....{.......~.}.........A{J.y..8.a(.......}.V1H.;[email protected]....
S.....j..I4--...p.v...E..!!......'..$..*..Y...;.......'.....C~...cl.o.
.x."..].........(o....8..c...7D..a.........I` oi.,Z....1..0..&.=e....y
D.92.u.ewH....ao...$...N{.Z.'[email protected].`.b....9...._...!..G.
..=%..i.K....e..d/.b.QXL.k ........A..x...k.....][...E4.|i.88.\.V.#.0.
i.....`..z.F-...kh.)z.C.a..PM.H..v.q..r.p..........wuI~.S.."..... ...|
............N. .5q......"I.f.9;...J55....3c...Q.....]...<6..78.
<<< skipped >>>

GET /newstyle/helpidc/images/host_deposit_img.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.3vidc.net/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:21 GMT

Content-Length: 13136

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/host_deposit_img.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "99ca6fab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...G...m.......|O....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:3DD67058CA9D11E2A79CA924
4D0C1859" xmpMM:DocumentID="xmp.did:3DD67059CA9D11E2A79CA9244D0C1859"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3DD67056CA9D11E2A7
9CA9244D0C1859" stRef:documentID="xmp.did:3DD67057CA9D11E2A79CA9244D0C
1859"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..-.../.IDATx..}[...u.........<.../.)..l
..%[email protected]^....=.E..Kb..E..(.....4E....4H..qR........DR$.;yx.s.33.m..
....m.!).G.......k......._...._..0|.).<.d<.l..}5.L.... ..Z..G.=H
'..V/.....,`Ye0....(..T>..d....y....By.[....k......_.J.....x......V
,.$.a.KG..d.........8...t..[8v6<t...HF.'.X...V......'I4....t|...hw}
.w............o.........RH.A....p..........//B..Bp`..d.."...!..B..TY.E
.gy..y......^..qQ.8U"NR.G._....."..o..H..x2....Q...*O.,/.".#....Ex...G
.....~. .T.}..J.....A.A.0.9........@,..<...d.~..<H4@.&...r>..
.......W..n...x....A......H........o|........2.P([email protected]..\.
<<< skipped >>>

GET /newstyle/helpidc/images/icon1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:25 GMT

If-None-Match: "30bcaaa8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:22 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon1.png

Last-Modified: Mon, 01 Sep 2014 02:37:25 GMT

Accept-Ranges: bytes

ETag: "30bcaaa8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/t_bg2.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 29 Sep 2014 00:40:00 GMT

If-None-Match: "6ab0c9e67ddbcf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:22 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg2.png

Last-Modified: Mon, 29 Sep 2014 00:40:00 GMT

Accept-Ranges: bytes

ETag: "6ab0c9e67ddbcf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/t_bg3.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 29 Sep 2014 00:41:24 GMT

If-None-Match: "5673fc187edbcf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg3.png

Last-Modified: Mon, 29 Sep 2014 00:41:24 GMT

Accept-Ranges: bytes

ETag: "5673fc187edbcf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/icon6.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 01 Sep 2014 02:37:27 GMT

If-None-Match: "163a53ab8dc5cf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/icon6.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "163a53ab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/t_bg4.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

If-Modified-Since: Mon, 29 Sep 2014 00:41:31 GMT

If-None-Match: "60e0171d7edbcf1:b24"

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF

HTTP/1.1 304 Not Modified

Date: Wed, 05 Nov 2014 01:07:23 GMT

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/t_bg4.png

Last-Modified: Mon, 29 Sep 2014 00:41:31 GMT

Accept-Ranges: bytes

ETag: "60e0171d7edbcf1:b24"

Server: Microsoft-IIS/6.0
....


GET /newstyle/helpidc/images/fdj.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 3800

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/fdj.png

Last-Modified: Mon, 01 Sep 2014 02:37:09 GMT

Accept-Ranges: bytes

ETag: "71485a08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR... .................pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V
<<< skipped >>>

GET /newstyle/helpidc/images/list_icon1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 1231

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon1.png

Last-Modified: Mon, 01 Sep 2014 02:37:09 GMT

Accept-Ranges: bytes

ETag: "3164d8a08dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:E52C6C59C90111E29804CA8B
40C56126" xmpMM:DocumentID="xmp.did:E52C6C5AC90111E29804CA8B40C56126"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E52C6C57C90111E298
04CA8B40C56126" stRef:documentID="xmp.did:E52C6C58C90111E29804CA8B40C5
6126"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>B`.V...CIDATx....J.A..w.....h.......]S.....
<.>.6....,v.\.D%........ ...Y.@\ft...X....9s..(.,........m..s.0.
4M.o_N0.........>......].Ex.Hl%...........I...q..B8.a..g8.W....E...
.s.....!....[...#p..p...m..8..`.v=D.".s...=Lz.....8..=.`.k....R.l.ou%.
[email protected].....;#...b.79....s..P....#...f....p.<$5.....{$.
.X.MX..-.b.6...[}.0...={........IEND.B`.....
<<< skipped >>>

GET /newstyle/helpidc/images/list_icon3.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:24 GMT

Content-Length: 1291

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/list_icon3.png

Last-Modified: Mon, 01 Sep 2014 02:37:10 GMT

Accept-Ranges: bytes

ETag: "9e74da18dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR.............V..W....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0E716CD5C90311E2919AA0A2
EC0A47BC" xmpMM:DocumentID="xmp.did:0E716CD6C90311E2919AA0A2EC0A47BC"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0E716CD3C90311E291
9AA0A2EC0A47BC" stRef:documentID="xmp.did:0E716CD4C90311E2919AA0A2EC0A
47BC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...Y....IDATx.... DQ..q3....d.H3......lD2.X
PR.VR...[.e.&R......Y......."..=z...9.O}........sO ...XJ].F.........nL
[email protected].`.Y=..kT7..!f...3(.$J....Mz......2.,.g.E..Qi..c.m.&..?
{..U.....v.jK..^-.x......x.p[...E......'Q.......?.:.m.......X..,`....o
.t....3Z1...8z....m.(!o...e.u.U..cp..rsD..;z..d..vo1..d...,..j-!...UA9
..J6]~5.W.b.. .W-.^..~....d.._......r!Sq./..QVV...h...H..!6p S.W?.....
[email protected]`.....
<<< skipped >>>

GET /newstyle/helpidc/images/footer_line1.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 957

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_line1.png

Last-Modified: Mon, 01 Sep 2014 02:37:04 GMT

Accept-Ranges: bytes

ETag: "9763d09d8dc5cf1:b24"

Server: Microsoft-IIS/6.0
[email protected] ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:16C2D8F2C83711E2A002A466
6F573A6F" xmpMM:DocumentID="xmp.did:16C2D8F3C83711E2A002A4666F573A6F"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:16C2D8F0C83711E2A0
02A4666F573A6F" stRef:documentID="xmp.did:16C2D8F1C83711E2A002A4666F57
3A6F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.......1IDATx.b...?.....2=x..?........2F...
..`.f..0.w.....X.J...g....IEND.B`.....


GET /newstyle/helpidc/images/footer_img2.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 4916

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/footer_img2.png

Last-Modified: Mon, 01 Sep 2014 02:37:27 GMT

Accept-Ranges: bytes

ETag: "4295b9ab8dc5cf1:b24"

Server: Microsoft-IIS/6.0
.PNG........IHDR...E.........].......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:AA1B14A5C83C11E28493D9BC
B0CAE569" xmpMM:DocumentID="xmp.did:AA1B14A6C83C11E28493D9BCB0CAE569"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA1B14A3C83C11E284
93D9BCB0CAE569" stRef:documentID="xmp.did:AA1B14A4C83C11E28493D9BCB0CA
E569"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...~....IDATx..Xk..Uy~.......{[email protected] ...
.*.\j`...*.X..Tc*.E...I.U...uQhuEj.)........I$..$..L&.....|.>{..d..
k....:s.|......>..>.V...AohK*[email protected].......>.....g/5...V
B.........../...-....=.......3..=..q....0...k..'..8?....l.n...._..kKN)
.......gn@P]>.~L........^.}.I.....?.4.g....8|...`.lL.y..Z.....r....
9~?...%Lp-......^.=4....!]...J.T.V.B..U..K..........Yg..-.B.......g#^.
d..U..R#N=...I"..-\.t......T....h..".fk:....s.......7.%.c.o9.?...M..Z.
m(.Hc...Y..fH.....a...m..*.@..._bl.&$*.Pcq(" 4..ux.H...;[email protected]...
[email protected]...?....By0.-. ...._.....i.p~..|.Z. _.Y........T.&.T
<<< skipped >>>

GET /newstyle/helpidc/images/bottom_line.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.3vidc.net

Connection: Keep-Alive

Cookie: ASPSESSIONIDASTBASDR=LILJJBLAIOEBEEIDJPLELHPF; CNZZDATA986628=cnzz_eid=1454631427-1415147057-&ntime=1415147057

HTTP/1.1 200 OK

Date: Wed, 05 Nov 2014 01:07:25 GMT

Content-Length: 949

Content-Type: image/png

Content-Location: hXXp://VVV.3vidc.net/newstyle/helpidc/images/bottom_line.png

Last-Modified: Mon, 01 Sep 2014 02:37:04 GMT

Accept-Ranges: bytes

ETag: "fcdaf89d8dc5cf1:b24"