OMPN Magic
(Backdoor.Win32.OmpnMagic)

by Titant

Written in Visual Basic

Released in February 2002

Made in France

more versions


OMPN is a backdoor which draws its name of Orphanage Mutualist of the National police force.


Server:
dropped file:
C:\run32.exe 

size: 396 KB

port: 452 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "RunWin" 

MegaSecurity