CALL US: +4-021-4085474
According to the security engineer, the backdoor attempts to create a TCP callback shell when the rogue instance receives a ":)" (smiley face) request.
Source: Softpedia News
25.04.2011