Afcore (d)
(Backdoor.Afcore.d)

by ?

Released in January 2004

more versions


dropped files:
c:\WINDOWS\SYSTEM\BRMQCFM.DLL  size: 20.480 bytes   (Backdoor.Afcore.g) 
c:\WINDOWS\TEMP\brmqcfm.dll    size: 20.480 bytes   (Backdoor.Afcore.g)
c:\WINDOWS\TEMP\brmqcfm.exe    size: 36.864 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "BRMQCFM"
data: "C:\WINDOWS\SYSTEM\BRMQCFM.exe" 



tested on Windows 98
December 29, 2004

MegaSecurity