AF
(Backdoor.AF)

by ?

Written in Assembly




This bot accepts following commands:
OPEN, CLOSE, SESSIONS, SEND, RESTART, DIE, EXEC, NAME, VERSION, HELP, ADD, DEL,
LIST, RETRIES, START, STOP


Server:
c:\WINDOWS\SYSTEM\ToolsBar32.exe 

size: 17.920 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AF" 

added:
HKEY_LOCAL_MACHINE\Software\AF\links 

Tries to connect to specified IRC server and joins a channel to listen for commands

MegaSecurity