Written in Delphi

Released in July 2004

Made in Poland

more versions

Server:
dropped file:
c:\WINDOWS\mks.exe
size: 561,152 bytes 

port: 
1906, 1986, 1910, 8610, 861, 8618, 9717, 869, 1907, 1010, 1011, 69 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Mks Skaner"
data: C:\windows\mks.exe 



tested on Windows XP
January 30, 2005