Litmus 2.02
(Backdoor.Win32.Litmus.202)

by The Litmus Group

more versions




dropped file:
c:\WINDOWS\litmus\MSGSRV32.EXE  
size: 33.312 bytes 

port: 113 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LTM2" 

MegaSecurity