MagicLink netPCspy 1.4
(Backdoor.Cmjspy.ae)

by cmjsoft

Written in Delphi

Released in April 2003

more versions




Server:
dropped files:
c:\WINNT\system32\hlicense.vxd  size: 0 bytes 
c:\WINNT\system32\magiclink.exe size: 304.640 bytes 
c:\WINNT\system32\magicset.set  size: 17 bytes 
c:\WINNT\system32\sname         size: 0 bytes 
c:\WINNT\system32\tdllcope.vxd  size: 1.000 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Magic Link server"
data: magiclink.exe 

tested on Win2000

MegaSecurity