Alofin
(Backdoor.Win32.Alofin)

by ?

Written in Borland C++, packed with UPX


Backdoor.Alofin:

size: 35.840 bytes

port: 21653 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MyApplet"

does connect to an IRC server in Russia and joins the channel #allofin

MegaSecurity