.: AF :.

By ?

::actions

I feel lucky I feel lucky (with image)

Additional Details

Coded by: ?
Version: AF
Coded in: Assembly
Family: AF
Category: Remote Access

MegaSecurity Notes

Server:
c:\WINDOWS\SYSTEM\ToolsBar32.exe 

size: 17.920 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "AF" 

added:
HKEY_LOCAL_MACHINE\Software\AF\links 

Tries to connect to specified IRC server and joins a channel to listen for commands

Author Words

This bot accepts following commands:
OPEN, CLOSE, SESSIONS, SEND, RESTART, DIE, EXEC, NAME, VERSION, HELP, ADD, DEL,
LIST, RETRIES, START, STOP

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.