Guangwai Girl 1.0.b Server
(Backdoor.Win32.GWGirl.10.b)

by Guangwai

Compressed with ASPack

Released in September 2001

Made in China

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\DIAGCFG.EXE

size: 97.792 bytes

Port: 6267 TCP

Startup:
HKLM\software\Microsoft\Windows\CurrentVersion\RunServices
HKCR\exefile\shell\open\command

MegaSecurity