Y! Jacked Full
(Trojan-IM.Win32.AimLog.a)
(Trojan-PSW.Win32.YahooPass.f)

by Leo

Written in Visual Basic

Released in June 2004

more versions


[Y! Jacked 1.3 FULL for YIM 6x and 7x]


Now you could if you wanted send this to your freinds and 
what not and let them use what you paid for, but I warn you
the more people that have this program the quicker it will
be detected by the anti-virus's!

Anyways there�s a folder called dat, do not move or rename 
it or any of the files inside it otherwise Y! Jacked wont 
work correctly. Just leave the folder where it is.

New stuff:

Works on 7x !!! (Beta YIM and also the NEW YIM when they release it!)

File binder: You can now bind any file you want to your sender! 
The file you bind will be opened when the sender is opened.
This is a key feature into tricking people into thinking the 
sender is a real program/file.

Small harmless bug fixed in the sender (it would �lag� a little
when opened before).


Leo


Server:
dropped files:
c:\WINDOWS\Downloaded Program Files\smss.exe
size: 17,906 bytes 

c:\WINDOWS\Downloaded Program Files\svchost.exe
size: 3,232 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666} "StubPath"
data: C:\WINDOWS\Downloaded Program Files\svchost.exe 



tested on Windows XP
March 02, 2006

MegaSecurity