AMS 3.6.1.8
(Backdoor.Alfdoor for server)

by Griffin

Released in march 2003

Written in Visual C++

Made in China

more versions


Servers:
c:\WINDOWS\SYSTEM\msinet.exe 
c:\WINDOWS\SYSTEM\Xdict.exe
 
size: 69.632 bytes 

port: 1688, 1689 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Kingsoft" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "msi" 

MegaSecurity