Troj/Mads-A

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Mads-A is a proxy Trojan.

Troj/Mads-A copies itself to the Windows system folder as MDS.EXE and sets the following registry entries in order to be run on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
mds.exe
<system>\mds.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
mds.exe
<system>\mds.exe

Troj/Mads-A registers itself on a remote website and then functions as a proxy server, allowing remote users to route HTTP traffic through the infected computer.

download Try Sophos products for free
Download now