Gadu-Ghost 2.2
(Backdoor.Win32.GGDoor.22)

by Wojass

Written in Delphi

Made in Poland

Released in May 2005

Other versions


Server:
dropped file:
c:\Documents and Settings\%user%\Desktop\ggt22\1144229dll.dll
size: 53,760 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCHINJDRV
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mchInjDrv
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCHINJDRV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mchInjDrv



tested on Windows XP
May 27, 2005 

MegaSecurity