MagicLink netPCspy 1.61
(Backdoor.CmjSpy.16.a)

by cmjsoft

Written in Delphi

Released in September 2003

more versions




Server:
dropped files:
c:\WINNT\system32\hlicense.vxd  size: 52 bytes 
c:\WINNT\system32\magiclink.exe size: 315.434 bytes 
c:\WINNT\system32\mmsysdll.dll  size: 306.664 bytes 
c:\WINNT\system32\sname         size: 70 bytes
 
port: 1982 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PerformanceService\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PerformanceService\Security

tested on Windows 2000

MegaSecurity