.: Yahoo Sender 1.0 :.

Released 14 years, 2 months ago. May 2007

By Peyman

Additional Details

  • From: Iran
  • Coded by: Peyman
  • Version: Yahoo Sender 1.0
  • Released date: May 2007, 14 years, 2 months ago.
  • Family: Yahoo Sender 1.0
  • Category: Information Stealer

MegaSecurity Notes

dropped file:
c:\WINDOWS\get.exe             Size: 16,386 bytes 
c:\WINDOWS\system32\mesg.com   Size: 70,869 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe C:\WINDOWS\system32\mesg.com 




tested on Windows XP
May 16, 2007

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.