MagicLink 2.4
(Backdoor.Cmjspy.24)

by cmjsoft

Written in Delphi, compressed with UPX

Made in China

Released in July 2003

more versions




Server:
c:\WINDOWS\SYSTEM\magic.exe 

size: 314.921 bytes

port: 1982 TCP

startup:
c:\windows\win.ini, [windows] "load" 

added:
c:\WINDOWS\SYSTEM\mmsysdll.dll 
c:\WINDOWS\SYSTEM\sname 
c:\WINDOWS\TEMP\mmdlltxt.htm 

MegaSecurity