PA HAC Gamez One Server
(Backdoor.Win32.Plik.b )

by PA HAC

Written in Delphi

Released in July 2004

Made in Poland

more versions


dropped file:
c:\WINDOWS\Mks.exe
size: 704,000 bytes 

port: 1090, 1091, 1092, 1093, 1094, 1095 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Mks"
data: C:\windows\Mks.exe 

tested on Windows XP
December 20, 2005

MegaSecurity