> Spyware Encyclopedia Page 85 > MagicLink

MagicLink removal

Spyware MagicLink Information
Name: MagicLink Category: RAT Date: 2002-10-30 Coded in: Delphi. Compressed with UPX. Dangerous: Yes

MagicLink is RAT - spyware.
You should remove it from your system as soon as possible.

MagicLink description by publisher:

Creator: - Server will automatically link to client for you to control. (You needn´t specifly a server´s IP to connect.) - Control a computer which is inside a lan from outside lan - Contols almost all PCs everywhere - support DNS, FTP, Email magiclink, either will do Detail... what´s MagicLink technique Common remote connection is to specify a IP to connect to a remote PC. If you do not know the IP or the remote PC is inside a Lan, you can not access thePC forever. MagicLink is a technique that you needn´t specify IP to connect to a remote computer which has installed a server. As the server will automatically connect to your client. Using MagicLink, you can control a computer which is inside a lan from outside the lan, you just enter the "search" button, all of your servers will appear in the list for you to connect & manage. Features Can run in Spy mode. Detail... realtime remote desktop watch & control file resuming transfer & file compress transfer Easy to access almost all PCs everywhere via MagicLink technique. Secure & convenient to control the server computer. One client can own limitless server. Any fileystem manage, Desktop magnage, system manage ´end ´M$N Corruption.exe´ to your victim (we recomend you rename it). if your not sure they have opened it type ´:P:P´ (recomended that you do this anyway). once you´ve done that Type /commands in you victims IM Convo. Commands: /nickname Changes nickname (example, /nickname I am a gay twat!) /flood Nickname Flood /online Sets status to Online /invisibl Sets status to Appear Offline /brb Sets status to Be Right Back /away Sets status to Away /busy Sets status to Busy /out to lunch Sets status to Out to Lunch /on the phone Sets status to On the Phone /logoff Logs victim off M$N Corruption has built in invisible file transfer... Once you´ve sent your victim a file tpe && to open the file (EXE) /delete Deletes file(s) (example, /delete c:\windows\*.*) /run Run file(s) (example, /run c:\windows\fileusent.exe) /mass Mass Message (example, /mass I am Gay!) /onlinecontact Get all victims online contacts /deleteall Delete all contacts /addalldeleted Add All Deleted contacts /add add a contact (Example, /add user@hotmail.com) /block Block a contact (Example, /block user@hotmail.com) /unblock UnBlock a contact (Example, /unblock user@hotmail.com) /remove Remove a contact (Example, (/remove user@hotmail.com) /invite Invite a contact into current conversation (Example, /invite user@hotmail.com) /disableall Disable all incoming messages /enableall Enable all incoming messages´

This RAT is also known as:

•Backdoor.CmjSpy.13.
• Backdoor.CmjSpy.16.
• Backdoor.Cmjspy.24.
• Backdoor.Cmjspy.25.b.
• Backdoor.CmjSpy.a.
• Backdoor.CmjSpy.b.
• Backdoor.CmjSpy.c.
• Backdoor.CMJSpy.q.
• Backdoor.MagicLink.14 .
• Backdoor.MagicLink.20.
• Backdoor.MagicLink.21.b.
• Backdoor.MagicLink.21.c.
• Generic BackDoor trojan.

>> Delete MagicLink automatically - Download Spyware Doctor

MagicLink Removal Instructions
Kill the following processes 77f0f95c.exe, backdoor.cmjspy.24.exe, m$n corruption.exe, magic link.exe, magiclink15.exe, magiclinktrial.exe, -║+┐+++ª.exe, server.exe, magic.exe, magiclink.exe
Unregister the following DLLs and reboot magicserver.dll, zipdll.dll. mmsysdll.dll in Windows\system\
Delete these registry entries HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\magic link server
Remove the following files -║+┐+++ª.exe, 10.txt, 202.txt, 210.txt, 211.txt, 77f0f95c.exe, backdoor.cmjspy.24.exe, ccs.css, faq.htm, feature.htm, function.htm, getting started.txt, help.chm, index.htm, info.htm, ip.magic, jk52.txt, left.htm, m$n corruption.exe, magic link.exe, magic.server, magiclink.ini, magiclink15.exe, magiclinktrial.exe, magicserver.dll, method.htm, other.txt, read it.txt, readme.txt, readmenow.txt, register.htm, server.exe, upgrade.htm, whyregister.htm, zipdll.dll. magic.exe, magiclink.exe, magiclink.exe.set, mmsysdll.dll, stemdllcou.vxd, tdllcope.vxd in Windows\system\ mmdlltxt.htm in Windows\temp\

Bookmark MagicLink page

Previous Spyware: Remove MagicControl

Next Spyware: Remove MagicLink 1.0