> Spyware Encyclopedia Page 89 > Motlv 1.2

Motlv 1.2 removal

Spyware Motlv 1.2 Information
Name: Motlv 1.2 Category: FTP Server Date: 2003-07-26 Author: Steam Coded in: Delphi Dangerous: Yes

Motlv 1.2 is FTP Server - spyware.
You should remove it from your system as soon as possible.

Motlv 1.2 description by Steam:

Creator: MotIv 1.2 by STEAM, from DoXo0n Yes, its here, the new Motiv FTP hack prog. Now its easier then before, & the victim will see nothin` UPDATES VERSION 1.2: - Now you must send some any file to the victim, tell to him that the application is versus nukes or whatever so he`ll run the file... The install application will install the trojan on the victims computer, it`ll make shortcuts in the startmenu on his computer so it looks all proffesional & he really things its a reliable application. :-) - The application writes itself in the win.ini file so anytime the victim computer starts up, Motiv will also startup & gives you access. This was requested by alot of ppl. THE ZIPFILE MUST CONTAIN THE FILES: INSTALL.EXE (the application that installs the trojan) disk1.pak (the compressed trojan) Motiv1.2.txt (this text file) HOW DOES THE PROGRAM WORK? - 1st of all, send the any file: disk1.pak, install.exe & to the victim, DO NOT CHANGE THE NAMES OF THE FILEZ!!!! if u do change them then the application will not work. - then if the victim has recieved the any file, he must unzip them, then he must run install.exe - he`ll get a install wizard, the wizard will install the trojan: Motiv1.2.exe on his computer to this directory: c:\application any file\motivftp , the wizard will also make a shortcut in the startmenu. - If all is installed succesfully, then the trojan has been activated. - If the victim tells you that the install was not totally succesfull, then the trojan is NOT activated, all the any file are installed but his computer has (because of a unknown error by me) not activated the trojan. Tell him that he must search the file: motiv1~2.exe & that he must RUN that file... then the trojan is also activated. - After the installation the trojan will make the port21 open (for ever! until he deletes text in win.ini) so that everybody can connect him using a FTP application. - By connecting use this settings: Server/Host: The victims ip (made to be found at mIRC or ICQ) Loginname: Anonymous Password: A existing emailaddress (not yours) Port: 21 - If all done well you´ve access to his harddrive(s) & you can upload/download all the any file you want. - Steal a drink & some food & have fun! FAQ: Q: I infected myself, how to uninfect myself? A: 1st of all yur a asshole to infect yourself.. =).. to uninfect delete the text in win.ini that links 2 motiv application, then delete the motiv1~2.exe, restart. If you only delete motiv1~2.exe port21 will still be open!! So be sure to check win.ini Q: My FTP application can`t connect to his IP, what to do? A: Be sure that the victim has installed everything succesfully. Motiv does not work on Win3.X or WinNT. Application made by Steam, webmaster Doxoon and Butcher, Hackass WCP.

This FTP Server is also known as:

•Ass Motiv FTP 1.2.
• Backdoor.MotivFTP.12 - named by Kaspersky.
• Backdoor/MotIv.1.A - named by Computer Associates.
• Univ.AP.H - named by Panda.

>> Delete Motlv 1.2 automatically - Download Spyware Doctor

Motlv 1.2 Removal Instructions
Kill the following processes 629c3a3a.exe
Remove the following files 629c3a3a.exe, motiv1.2.txt.

Bookmark Motlv 1.2 page

Previous Spyware: Remove Motley Crue trojan