by magic_h2001
Written in Delphi
Released in September 2004
Made in Iran
------------------
Magic-PS v1.5 SE++
------------------
{{ Second Edition Plus Plus }}
released in 30/09/2004
+ Now MPS can work in limited (Restricted) windows users. ( ex: in CafeNets systems )
+ Add Disable Regedt32 in disable Regedit item.
magic_h2001
Server:
dropped files:
c:\WINDOWS\REGSVR.EXE Size: 14,682 bytes
c:\WINDOWS\system32\Tapi32init.exe Size: 14,682 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6M8A6G00-3I18-11C0-821H-444200140P0S} "StubPath"
data: C:\WINDOWS\System32\Tapi32init.exe
tested on Windows XP
October 18, 2005
MegaSecurity