AdminMagic

AdminMagic is a quick and easy remote desktop control utility. It is a network application that allows administrators to manage and control PCs or networks from a remote location. Typically used in an enterprise environment, Commercial Remote Control Tools have legitimate uses for I.T. administration and are not harmful unless installed and used without the knowledge of the computer user or network administrator. It includes Low risk threats that should not harm our machine or compromise our privacy and security unless they have been installed without our knowledge and consent.0

General information:

Malware Name: AdminMagic
Malware Type: Remote Control
Company Name: Tools4ever
Company URL: http://www.tools4ever.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Tools4ever was founded in 1991 as a Banyan Vines and Windows NT-enhancement specialist. Its most widely known products are the disk quota management product SpaceGuard , and the user administration suite of tools UserManagemeNT . Tools4ever is a Microsoft Certified Partner and over 2000 companies all over the world use Tools4ever's products. Tools4ever specializes in systems administration enhancements for Windows NT and Windows 2000. Tools4ever is also committed to delivering superior customer support for all its products. Tools4ever has offices in the USA (New York) and Europe (UK, France and The Netherlands). All of Tools4ever's products are developed from the ground up for Windows 2003-XP-2000-NT. All products are downloadable from its website and may be evaluated for 30 days with full functionality.

Spyware Description:

AdminMagic is a quick and easy remote desktop control utility. It is a network application that allows administrators to manage and control PCs or networks from a remote location. Typically used in an enterprise environment, Commercial Remote Control Tools have legitimate uses for I.T. administration and are not harmful unless installed and used without the knowledge of the computer user or network administrator. It includes Low risk threats that should not harm our machine or compromise our privacy and security unless they have been installed without our knowledge and consent.0

Characteristics/Symptoms:

    -> It is a network application that allows to manage and control PCs or networks from a remote location. -> It allows to access another computer without explicit authorization. -> It can also be used to monitor and steal information from the remote computer -> Slows down the performance of PC0

Additional information might be found here:

google Search at Google for AdminMagic
bing Search at Bing for AdminMagic
yahoo Search at Yahoo for AdminMagic

Processes Running:

RepSvc.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\All Users\Desktop\AdminMagic.lnk 1433 Shortcut
C:\Documents and Settings\All Users\Start Menu\Programs\Tools4ever\AdminMagic\AdminMagic Help.lnk 567 Shortcut
C:\Documents and Settings\All Users\Start Menu\Programs\Tools4ever\AdminMagic\AdminMagic product page.url 150 Internet Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\AdminMagic Service

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{38E7D1E1-F724-4662-BFC4-B49A37493937} ProductGuid
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{38E7D1E1-F724-4662-BFC4-B49A37493937} UninstallString
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{38E7D1E1-F724-4662-BFC4-B49A37493937} Version