MagicLink netPCspy 2.0 (b)
(Backdoor.CmjSpy.20.b)

by cmjsoft

Written in Delphi

Released in January 2004

more versions




Server:
dropped files:
c:\WINDOWS\system32\hlicense.vxd   size: 10 bytes 
c:\WINDOWS\system32\magic.exe      size: 94.032 bytes 
c:\WINDOWS\system32\msysdll.dll    size: 83.148 bytes 
c:\WINDOWS\system32\systmdllm.vxd  size: 73 bytes
 
port: 1982 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MagicLinkServer"
data: magic.exe

tested on Windows XP 

MegaSecurity