Troj/Ranck-CP

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

The Trojan creates the following registry entry so as to run itself on computer logon:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
fasdqwdwq
<path to Trojan>

Troj/Ranck-CP when run listens on a randomly chosen TCP port in the range 10000-50000. The Trojan notifies a remote web server of the listening port via a web request.

download Try Sophos products for free
Download now