BioNet

Name: BioNet
Aliases: GCI BioNet, BN, Backdoor.Bionet, Bio, Backdoor.FK,
Ports: 12348, 12349 (ports can be changed)
Files: Bionet.exe - 409,088 bytes Bionet.exe - 473,600 bytes Bionet.exe - 477,184 bytes Bionet.exe - 488,960 bytes Bionet.exe - 504,320 bytes Bionet.exe - 506,368 bytes Bionet.exe - 525,Bionet.exe - 530,432 bytes Bionet.exe - 532,480 bytes Bionet.exe - 538,624 bytes Bionet.exe - 563,712 bytes Bionet.exe - 604,160 bytes Bionet.exe - 609,792 bytes Bionet.exe - 626,688 bytes Bionet.exe - 638,976 bytes Bionet.exe - 648,192 bytes Bionet.exe - 665,600 bytes Bionet.exe - 667,136 bytes Bionet.exe - 669,904 bytes Bionet.exe - 2,008,576 bytes Builder.exe - 563,200 bytes Builder.exe - 563,712 bytes Builder.exe - 579,072 bytes Builder.exe - 593,920 bytes Builder.exe - 633,856 bytes Builder.exe - 651,776 bytes Builder.exe - 654,336 bytes Builder.exe - 710,656 bytes Builder.exe - 872,960 bytes Builder.exe - 879,616 bytes Builder.exe - 885,760 bytes Server.exe - 225,480 bytes Server.exe - 269,490 bytes Server.exe - 271,026 bytes Server.exe - 271,388 bytes Server.exe - 273,588 bytes Server.exe - 274,662 bytes Server.exe - 281,264 bytes Server.exe - 284,624 bytes Server.exe - 284,672 bytes Server.exe - 303,056 bytes Server.exe - 316,590 bytes Server.exe - 317,952 bytes Server.exe - 318,464 bytes Server.exe - 404,480 bytes Server.exe - 415,744 bytes Server.exe - 425,472 bytes Server.exe - 727,040 bytes Server.exe - 730,624 bytes Servernt.exe - 415,232 bytes Serverup.exe - 729,780 bytes Server37.exe - 265,904 bytes Unpacked server.exe - 820,736 bytes Unpacked server.exe - 822,272 bytes Editor.exe - 285,696 bytes Editor.exe - 318,976 bytes Editor.exe - 319,488 bytes Editor.exe - 324,096 bytes Editor.exe - 393,216 bytes Editor.exe - 610,816 bytes Debug.exe - 404,480 bytes Debug.exe - 415,744 bytes Debug.exe - 425,472 bytes Debugnt.exe - 415,744 bytes Gcinet.exe - 702,464 bytes Gcinet.exe - 703,488 bytes Gcinetnt.exe - 702,464 bytes Libupdate.exe - Bnscript.ini - Explorer.e - Cdeztks.exe - Winupdate00.exe - Bnlog.pl - 14,476 bytes - 37,376 bytes
Created: Nov 1999
Requires: Winsock.dll - is required to run the trojan.
Actions: Anti-protection trojan / Remote Access / Keylogger / Steals passwords / ICQ trojan / IRC trojan / AOL trojan / Port scanner / IP scanner / DoS tool / Remote peeker / Eavesdropper / Downloading trojan
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\GCI
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SessionManager\Known16DLLs
Notes: Works on Windows 95, 98, ME, NT, 2000 and XP, together with ICQ and IRC software. Only versions 0.9x and later, works on NT. BioNet versions 3.x are not compatible with versions 2.x.
Country: written in Great Britain
Program: Written in Borland Delphi.
© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>