Litmus 3.01
(Backdoor.Win32.Litmus.301)

by The Litmus Group

Written in LCC

more versions




dropped file:
c:\WINDOWS\nt32.exe
size: 9.760 bytes 

port: 43330 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "nt32"
data: C:\WINDOWS\nt32.exe /m 



tested on Windows 98
March 09, 2006

MegaSecurity