Ma petite amie
(Backdoor.Win32.GF.135.d)

by Katux

Based on source of  GirlFriend 1.35

Written in Delphi

Server compressed with UPX

Released in April 2002

Made in France


Server:
dropped file:
C:\WINDOWS\Windll.exe 

size: 169 KB

port: 22554 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Windll.exe" 

MegaSecurity