high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | January 2006 (4.01) |
| Protection available since | 13 November 2005 22:00:55 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Proxy-FP is a Trojan for the Windows platform.
The Trojan opens a random port and offers a proxy service, allowing remote attackers the ability to anonymously route HTTP traffic through the infected computer.
The Trojan sets the following registry entries:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Anti-Virus Update Scheduler
"<path to Trojan>"
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile\AuthorizedApplications\List\<path to Trojan>
"<path to Trojan>:*:Enabled:Server"
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\List\<path to Trojan>
"<path to Trojan>:*:Enabled:Server"
|
