HGZ 0.0.1
(Backdoor.Win32.Delf.ib for Client)
(Backdoor.Win32.Hupigeon for Server)

by HGZ

Written in Delphi

Released in August 2002

Made in China

more versions


Client:
port: 8201, 8202, 8203, 8204, 8200 TCP



Server:
c:\WINDOWS\SYSTEM\SVCH0ST.EXE 

size: 309.876 bytes

port: 8225 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LoadPowerfile" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices 

MegaSecurity