Kryptonic Ghost 1.3
(Backdoor.Win32.Kryptonic.13)

by SpikE, Mark & JD

Written in Visual Basic

Released in May 2002

more versions


Client:
port: 15695, 8097 TCP


Server:
c:\WINDOWS\SYSTEM\Msgp.exe 

size: 180 KB

port: 16761, 9919 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MSREGIT" 

MegaSecurity