MagicLink netPCspy 1.5 (ac)
(Backdoor.CmjSpy.15.ac)

by cmjsoft

Written in Delphi

Released in October 2003

more versions




Server:
dropped files:
c:\WINNT\system32\hlicense.vxd  size: 0 bytes 
c:\WINNT\system32\magiclink.exe size: 305.664 bytes 
c:\WINNT\system32\magicset.set  size: 17 bytes 
c:\WINNT\system32\sname         size: 0 bytes 
c:\WINNT\system32\tdllcope.vxd  size: 1.000 bytes
 
port: 1982 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Magic Link server"
data: magiclink.exe
 
tested on Win2000

MegaSecurity