.: Yakoza 2.0 :.

Released 15 years ago. Jun 2007

By Ali Moazemi

::actions

I feel lucky I feel lucky (with image)

Additional Details

From: Iran
Coded by: Ali Moazemi
Version: Yakoza 2.0
Released date: Jun 2007, 15 years ago.
Family: Yakoza
Category: Information Stealer

MegaSecurity Notes

Server:
c:\WINDOWS\system32\regsvr.exe
Size: 23,719 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
Old data: Explorer.exe 
New data: explorer.exe C:\WINDOWS\System32/regsvr.exe 


Tested on Windows XP
November 16, 2007

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.