high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2007 (4.19) |
| Protection available since | 22 May 2007 11:58:09 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Proxy-HR is a Trojan for the Windows platform.
When run Troj/Proxy-HR copies itself to the Windows folder as msnfo32s.exe, adding the following Registry entry to hook system startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
msnfo32s
<Windows>\msnfo32s.exe
Once running Troj/Proxy-HR connects to a remote server (HTTP) to report the installation, and the port numbers required for control of the proxy.
|
