by The Litmus Group
Written in LCC
dropped file: c:\WINDOWS\litmus\MSGORV32.EXE size: 32.800 bytes port: 113 TCP startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LTM2" data: C:\WINDOWS\litmus\MSGORV32.EXE does (try to) connect to an IRC server tested on Windows XP November 23, 2004MegaSecurity