MagicLink netPCspy 1.3
(Backdoor.Win32.CmjSpy.ai for client)
(Backdoor.CmjSpy.13.b for server)

by cmjsoft

Written in Delphi

Released in July 2003

more versions 




Server:
dropped files:
c:\WINNT\system32\hlicense.vxd  size: 0 bytes 
c:\WINNT\system32\magiclink.exe size: 301.568 bytes 
c:\WINNT\system32\magicset.set  size: 17 bytes 
c:\WINNT\system32\sname         size: 0 bytes 
c:\WINNT\system32\tdllcope.vxd  size: 1.000 bytes 

port: 1982 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Magic Link server"
data: magiclink.exe

tested on Win2000
MegaSecurity