high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 30 January 2006 14:16:05 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Ranck-DO is a HTTP proxy server Trojan.
The Troj/Ranck-DO proxy server may be used to forward spam.
When Troj/Ranck-DO becomes active it sends a notification message to a remote location, specifying the IP address of the current computer and the randomly generated port number which will typically be within the range 10000 - 50000.
Troj/Ranck-DO includes functionality to:
- provide a proxy server
- access the internet and communicate with a remote server via HTTP
The following registry entry is created to run Troj/Ranck-DO on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SmartTesting
<pathname of the Trojan executable>
|
