MagicLink 1.0
(Backdoor.Win32.CmjSpy.a for Server)
(Backdoor.Win32.CmjSpy.b)

by cmjsoft

Written in Delphi

Made in China

Released in April 2000

more versions




Server:
dropped file:
c:\WINDOWS\SYSTEM\magiclink.exe 

size: 285.184 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Magic Link server" 

added:
c:\WINDOWS\SYSTEM\stemdllcou.vxd 

MegaSecurity