Written in Delphi

Released in July 2004

Made in Poland

more versions

server 1

server 2

Server 1: Co kolwiek.exe:
dropped file:
c:\WINDOWS\mdm.exe
size: 531.968 bytes 

port: 1090, 1091, 1092,1093, 1094, 1095 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "SchuldingProfile"
data: C:\windows\mdm.exe 




Server 2: Gamez One.exe:
dropped file:
c:\WINDOWS\Mks.exe
size: 704.512 bytes 


port: 1090, 1091, 1092,1093, 1094, 1095 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Mks"
data: C:\windows\Mks.exe