Scene Archive Yahoo Spy Final

.: Yahoo Spy Final :.

Released 16 years, 10 months ago. Sep 2004

By MEHRDAD

::actions

I feel lucky I feel lucky (with image)

Additional Details

Coded by: MEHRDAD
Version: Yahoo Spy Final
Released date: Sep 2004, 16 years, 10 months ago.
Family: Yahoo Spy
Category: Information Stealer

MegaSecurity Notes

Server:
dropped files:
c:\WINNT\tcpctrl.exe          size: 944 bytes 
c:\WINNT\msagent\update.exe   size: 33.503 bytes 
c:\WINNT\system32\Decoder.dll size: 6.144 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"
data: C:\WINNT\tcpctrl.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
data: explorer.exe C:\WINNT\msagent\update.exe 

tested on Win2000

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.