.: BLOGFA-PS 1.1 :.

Released 15 years ago. Sep 2007

By Hosein Jam

::actions

I feel lucky I feel lucky (with image)

Additional Details

From: Iran
Coded by: Hosein Jam
Version: BLOGFA-PS 1.1
Released date: Sep 2007, 15 years ago.
Coded in: Visual Basic
Family: BLOGFA-PS 1.1
Category: Information Stealer

MegaSecurity Notes

Server
c:\WINDOWS\system32\mswin.exe
Size: 36,940 bytes 	

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "nod32kui"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System"

	
Tested on Windows XP
January 22, 2008

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.