high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 3 January 2007 20:35:41 (GMT) |
| Cleanup available since | January 2007 |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/RJump-I is a backdoor Trojan for the Windows platform.
Troj/RJump-I includes functionality to connect to the internet and communicate with a remote server using HTTP.
Troj/RJump-I listens for incoming connections on a randomly-chosen TCP port between 12000 and 19000, allowing a remote attacker to gain access and control over the infected computer.
When first run, Troj/RJump-I copies itself to AdobeR.exe in the Windows folder and creates the following registry entry in order to be run automatically on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RavAv
<Windows>\AdobeR.exe
If run with sufficient rights Troj/RJump-I will install itself as an application authorised by Windows Firewall to communicate with the outside world.
|
