Written in Delphi, compressed with ASPack

Released in February 2002

Made in Russia

more versions

Server:
dropped file:
C:\WINDOWS\mmflash.exe 

size: 250.403 bytes

port: 22222, 33555, 57785 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce "Mmedia Suport" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Mmedia Suport" 


Added:
c:\WINDOWS\sys.cf