Troj/QQPass-AF is a Trojan for the Windows platform. It will monitor for windows
related to certain chat programs, and attempt to log the keystrokes for it. The
information will then be sent to a remote server.
When first run Troj/QQPass-AF copies itself to <System>\fswan.exe.
The following registry entry is created to run fswan.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SysDesktop
<System>\fswan.exe