high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 13 November 2004 16:16:43 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Ranck-BA is a proxy Trojan that allows a remote intruder to route internet traffic through an infected computer.
Troj/Ranck-BA will run continuously in the background listening on a port.
Periodically, Troj/Ranck-BA will contact a pre-defined URL to report that the computer has been infected and to give details of the port number that the Trojan is listening on.
In order to start automatically each time a user logs on, Troj/Ranck-BA sets the following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
SysData
<path to Trojan>
Sophos's anti-virus products include proactive protection technology, which can defend against new threats without requiring an update. Sophos customers have been protected against Troj/Ranck-BA (detected as Troj/Ranck-Gen) since version 3.85.
|
