.: Magic PS 1.1 :.

Additional Details

• From: Iran
• Coded by: magic_h2001
• Version: Magic PS 1.1
• Released date: Aug 2003, 17 years, 11 months ago.
• Coded in: Delphi
• Family: Magic PS
• Category: Information Stealer

MegaSecurity Notes

Server:
dropped file:
c:\WINDOWS\svchost .exe 

size: 13.036 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "svchost" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "svchost"

Author Words

=============================================
                .:: MPS ::.
              Magic-PS series

   MPS is a Powerfull Password Sender for
            Yahoo! Messenger

   MPS sends victim id & pass to your id

    Work without any smtp and script ;)

       Tested on Win98-Me-2000-XP-NT
	   
------------------
Magic-PS v1.1 Beta
------------------

1.Edit server some bugs Fixed
2.Sender Bug Fixed (Task Hiding win9x-Me)

magic_h2001