HGZ 2003 beta2

HGZ 2003 beta2
(Backdoor.GrayBird.g for CServer.dat)
(Backdoor.GrayBird.f for CServer_dll.dat)
(Backdoor.GrayBird.h for SServer.dat)
(Backdoor.GrayBird.h for client)

by HGZ

Written in Delphi, compressed with ASPack

Released in January 2003

Made in China

more versions


Client:
port: 8001, 8002, 8003, 8004 TCP


Server:
c:\WINDOWS\SYSTEM\HgzServer.exe 

size: 466.573 bytes

port: 52013 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "huigezi" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "huigezi" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices 
c:\windows\win.ini, [windows] "run"

MegaSecurity