GiFt Trojan 2.4
(Backdoor.Win32.Gift.24)

by tr|force

Written in Visual Basic

Released in October 2001

more versions


Server:
dropped file:
c:\WINDOWS\SYSTEM\giftvictim.exe

size: 460.802 bytes 

port: 10100 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "GiFtVictim"
data: C:\WINDOWS\SYSTEM\giftvictim.exe 

MegaSecurity