MagicLink netPCspy 5.1
(Backdoor.Win32.CmjSpy.51)

by cmjsoft

Written in Delphi

Released in April 2005

more versions




Server:
dropped files:
c:\WINDOWS\system32\m2syadll.dll       Size: 101,588 bytes 
c:\WINDOWS\system32\magic.exe          Size: 112,472 bytes 
c:\WINDOWS\system32\sssdda334342.vxd   Size: 0 bytes 
 
port: 1982 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MagicLinkServer"
data: magic.exe 





tested on Windows XP 

MegaSecurity