Troj/Proxy-HT is a proxy Trojan for the Windows platform.
Troj/Proxy-HT runs continuously in the background, providing a proxy server which allows remote users to access the web via the infected computer, thus obscuring their own addresses.
When first run Troj/Proxy-HT copies itself to <Windows>\svchost.exe.
The following registry entries are created to run svchost.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Windows Firewall
svchost.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Windows Firewall
svchost.exe