Magic PS 1.5
(Trojan-PSW.Win32.Sagic.15)

by magic_h2001

Written in Delphi

Released in January 2004

Made in Iran

more versions


=============================================
                .:: MPS ::.
              Magic-PS series

   MPS is a Powerfull Password Sender for
            Yahoo! Messenger

   MPS sends victim id & pass to your id

    Work without any smtp and script ;)

       Tested on Win98-Me-2000-XP-NT
=============================================
	
	   
magic_h2001	   


Client:
size: 37,888 bytes

Server:
dropped files:
c:\WINDOWS\regsvr.exe           size: 12.668 bytes 
c:\WINDOWS\SYSTEM\MsAgent32.exe size: 12.668 bytes

registry added:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{5M8A6G00-3I18-11C0-821H-444200140P0S} "StubPath" 
data: C:\WINDOWS\SYSTEM\MsAgent32.exe

MegaSecurity