Troj/Ranck-AH

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Ranck-AH is a proxy Trojan that allows a remote intruder to route HTTP traffic through the computer.

Troj/Ranck-AH sets an entry in the registry at the following location so as to run itself on system startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
ICQMsn = <path to self>

Troj/Ranck-AH runs continuously in the background listening on a port.

download Try Sophos products for free
Download now