by PA HAC
Written in Delphi
Released in July 2004
Made in Poland
dropped file: c:\WINDOWS\Mks.exe size: 704,000 bytes port: 1090, 1091, 1092, 1093, 1094, 1095 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Mks" data: C:\windows\Mks.exe tested on Windows XP December 20, 2005MegaSecurity