Troj/Ranck-EP is a proxy Trojan that allows a remote intruder to route HTTP traffic through the computer.
Troj/Ranck-EP is a proxy Trojan that allows a remote intruder to route HTTP traffic through the computer.
The following registry entry is created to run Troj/Ranck-EP on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Services
<pathname of the Trojan executable>
Troj/Ranck-EP runs continuously in the background listening on a port.
Troj/Ranck-EP has been seen pretending to be a version of Google Toolbar.