Remove MagicLink. Description and removal instructions

 
Title: MagicLink

Type: Remote Administration Tools
Severity scale:MagicLink severity is 65  (65 / 100)
 
This is a very dangerous RAT virus. It can disable firewall protection. The pest also has the ability to send victims IP to the attacker automatically, so he has the opportunity to connect as soon as the infection is finished. Many versions of this pest appeared in the internet from April 2000 to February 2004. The author is a Chinese hacker called CMJ Soft. The pest was written in Delphi and compressed with UPX. It affects such operating systems as Windows 95, 98, ME, 2000 and XP.

From the publisher:

"- Server will automatically link to client for you to control. (You needn't specifly a server's IP to connect.) - Control a computer which is inside a lan from outside lan - Contols almost all PCs everywhere - support DNS, FTP, Email magiclink, either will do

Detail... what's MagicLink technique Common remote connection is to specify a IP to connect to a remote PC. If you don't know the IP or the remote PC is inside a Lan, you can't access thePC forever. MagicLink is a technique that you needn't specify IP to connect to a remote computer which has installed a server. As the server will automatically connect to your client. Using MagicLink, you can control a computer which is inside a lan from outside the lan, you just enter the "search" button, all of your servers will appear in the list for you to connect and manage.

Features Can run in Spy mode. Detail... realtime remote desktop monitor and control file resuming transfer and file compress transfer Easy to access almost all PCs everywhere through MagicLink technique. Secure and convenient to control the server computer. One client can own limitless server. Filesystem manage, Desktop magnage, system manage

'end 'M$N Corruption.exe' to your victim (we recomend you rename it). if your not sure they have opened it type ':P:P' (recomended that you do this anyway). once you have done that Type /commands in you victims IM Convo. Commands: /nickname Changes nickname (example, /nickname I'm a gay twat!) /flood Nickname Flood /online Sets status to Online /invisibl Sets status to Appear Offline /brb Sets status to Be Right Back /away Sets status to Away /busy Sets status to Busy /out to lunch Sets status to Out to Lunch /on the phone Sets status to On the Phone /logoff Logs victim off M$N Corruption has built in invisible file transfer... Once you have sent your victim a file tpe && to open the file (EXE) /delete Deletes file(s) (example, /delete c:\windows\*.*) /run Run file(s) (example, /run c:\windows\fileusent.exe) /mass Mass Message (example, /mass I'm Gay!) /onlinecontact Get all victims online contacts /deleteall Delete all contacts /addalldeleted Add All Deleted contacts /add add a contact (Example, /add user@hotmail.com) /block Block a contact (Example, /block user@hotmail.com) /unblock UnBlock a contact (Example, /unblock user@hotmail.com) /remove Remove a contact (Example, (/remove user@hotmail.com) /invite Invite a contact into current conversation (Example, /invite user@hotmail.com) /disableall Disable all incoming messages /enableall Enable all incoming messages"


MagicLink properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic MagicLink removal:

remover for MagicLink

MagicLink manual removal:

Kill processes:
77f0f95c.exe, backdoor.cmjspy.24.exe, m$n corruption.exe, magic link.exe, magiclink15.exe, magiclinktrial.exe, -º+¿+++¦.exe, server.exe, [system root]\\system\\magic.exe, [system root]\\system\\magiclink.exe
Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\magic link server
Unregister DLLs:
magicserver.dll, [system root]\\system\\mmsysdll.dll, zipdll.dll

Delete files:
10.txt, 202.txt, zipdll.dll, m$n corruption.exe, magic link.exe, magic.server, magiclink.ini, magiclink15.exe, magiclinktrial.exe, magicserver.dll, method.htm, -º+¿+++¦.exe, other.txt, read it.txt, readme.txt, readmenow.txt, register.htm, server.exe, [system root]\\system\\magic.exe, [system root]\\system\\magiclink.exe, [system root]\\system\\magiclink.exe.set, [system root]\\system\\mmsysdll.dll, [system root]\\system\\sname [system root]\\system\\stemdllcou.vxd, [system root]\\system\\tdllcope.vxd, [system root]\\temp\\mmdlltxt.htm, upgrade.htm, whyregister.htm, 210.txt, 211.txt, 77f0f95c.exe, backdoor.cmjspy.24.exe, ccs.css, faq.htm, feature.htm, function.htm, getting started.txt, help.chm, index.htm, info.htm, ip.magic, jk52.txt, left.htm

Other programs to remove MagicLink:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 07/04/05
Information updated: 07/04/05

Additional resources related to MagicLink:

Attention: If you know or you have a website or page about MagicLink removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about MagicLink parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: