Gibbon version b
(Backdoor.Gibbon.b)

Server only
Wanted: Client

Released in june 2001

Written in Delphi

more versions


Server:
C:\WINDOWS\TEMP\SCANREGW.EXE 
 
size: 160.256 bytes

port: 113 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

MegaSecurity