What you could do is look into some autorun lua files, look for strange methods and such, also a keyword you can look for is "admin" and "superadmin" because I remember a backdoor very hidden inside my autorun that gave a certain steamid admin as soon as he came in.