Litmus 0.02
(Backdoor.Win32.Litmus.002)

by The Litmus Group

more versions




dropped file:
c:\WINDOWS\traywnd.exe
size: 10.752 bytes 

port: 300053 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Taskschd"
data: C:\WINDOWS\traywnd.exe 

tested on Windows 98
November 23, 2004

MegaSecurity