by huaxingin & tengzhenin
Written in Delphi
Released in April 2001
Made in China
Client:
size: 1.129.984 bytes
port: 2101, 2222 TCP
Server:
C:\WINDOWS\TEMP\aboutagirl.exe
C:\WINDOWS\SYSTEM\GIRL.EXE
C:\WINDOWS\SYSTEM\IloveYou.EXE
size: 583.168 bytes
port: 6711, 1133, 8311, 1183 TCP
1183 UDP
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCR\txtfile\shell\open\command
MegaSecurity