Liveup (c)
(Backdoor.Win32.Livup.c)

by ?

Written in Microsoft Visual C++

more versions





dropped file:
c:\WINDOWS\system32\msstart.exe
size: 140.288 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msstart"
data: C:\WINDOWS\System32\msstart.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "SM_GamesData"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "SM_GamesInfo"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "SM_GamesSetup" 

tested on Windows XP
November 25, 2004

MegaSecurity