Troj/Flood-EL is a backdoor Trojan for the Windows platform.
When executed Troj/Flood-EL will copy itself to smss32.exe in the Windows System folder and add the following registry entries to ensure it is run on logon:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
MSConfig32
<Windows System folder>\smss32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MSConfig32
<Windows System folder>\smss32.exe
Troj/Flood-EL will join an IRC channel and await instructions.
Troj/Flood-EL is mainly designed to flood hosts on the internet by repeatedly opening and closing connections. The host and TCP port to flood are specified by the attacker who is controlling Troj/Flood-EL via IRC.
Troj/Flood-EL also contains functionality to download files at the attackers request.