I'm trying to decode a DAT file produced by Yahoo Messenger, which looks similar to the text below which I generated by opening an exe in Notepad:
‹
‹N€9 tè…ÀtäÿFöt‹FŠ ‹V‹NˆÿFÿNëÿFH‰F3À9Ft9Ft ö…³ ;Øtsj÷ël;Øt%‹F‹N¶Dÿj Pÿ5@aÐMè5 …À„þÿÿ…Ûuƒ} tÇEø jEPÿvÿvÿuøÿ5DaÐMÿÐM…Àu,ÿÐM=Y tjðë…ÛtjöXë<3Àf‹F,ÇF. ‰Eë‹E‹N…Étÿv2PÿÑëƒ~$ t
‹N(f‰ƒF(ÿF 3À‰F_[É ÌÌÌÌ̃ù
u<r<Ÿ
I have tried few online tools that has various encryption algorithm like Blow-fish, DES, MD5 1-Way and other normal encryption like leet speak, rot-13 etc, but i found the generated text is normal readable but not the original one. I think its AES or RSA or Triple DES. Actually i am working on a utility that will read the Yahoo Messengers archive of the local. But when i open the local , I found a DAT file, with encrypted text as above.
(UPDATE)
As per venkyduded article "yahoo uses a simple XOR algorithm to encode the messages (so much for security !!) ". Any good link on XOR rversing.
Any help would be highly appreciated.
Yahoo Messenger only encodes the data files. Take a look at http://www.venkydude.com/articles/yarchive.htm for details on the format of the data.