Sweet Heart 1.0
(Backdoor.Win32.Zhang)

by huaxingin & tengzhenin

Written in Delphi

Released in April 2001

Made in China

more versions


Client:
size: 1.129.984 bytes

port: 2101, 2222 TCP
           

			
			
Server:
C:\WINDOWS\TEMP\aboutagirl.exe
C:\WINDOWS\SYSTEM\GIRL.EXE
C:\WINDOWS\SYSTEM\IloveYou.EXE
   
size: 583.168 bytes

port: 6711, 1133, 8311, 1183 TCP
                        1183 UDP
						
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 		
HKCR\txtfile\shell\open\command 				

MegaSecurity