Kryptonic Ghost 0.4b
(Backdoor.Win32.Kriptonic.20)
(Backdoor.Win32.Kryptonic.10)

by SpikE, Mark & JD

Written in Visual Basic

Released in May 2002

more versions


Client:
port: two random ports  TCP


Server:
c:\WINDOWS\SYSTEM\smp\Msrc.exe 

size: 148 KB

port: 8732, 13079 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Msrc" 

MegaSecurity