Russian Trojans : Gip 1.131

Gip 1.131

Name: Gip
Version: 1.131
Author: Mr.Nop
Language: Visual C++ 5.0
Packed: Aspack 1.083, not packed (server (2))

Server Editor Editor GUI
Icon
Name Gip113doc.exe, Gip113jpg.exe Config.exe GipWizard.exe
Size 22016, 21504 (24.05.2000) 8704 (24.05.2000) 36864 (24.05.2000)
KAV detected Trojan.PSW.Gip.113.b Trojan.PSW.Gip.113.b Trojan.PSW.Gip.113.b

	Server	Editor	Editor GUI
Icon
Name	Gip113doc.exe, Gip113jpg.exe	Config.exe	GipWizard.exe
Size	22016, 21504 (24.05.2000)	8704 (24.05.2000)	36864 (24.05.2000)
KAV detected	Trojan.PSW.Gip.113.b	Trojan.PSW.Gip.113.b	Trojan.PSW.Gip.113.b

Editor GUI:

Editor:

Warning:
Editor add to registry:

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://xbx.rial.net:8101/gip/"

[HKEY_USERS\.Default\Software\Netscape\Netscape Navigator\Main]
"Autoload Home Page"="yes"
"Home Page"="http://xbx.rial.net:8101/gip/"