mdms.exe - This is a back door worm, when the infection starts it connects to an IRC server where it waits for remote commands to execute.