high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | March 2005 (3.91) |
| Protection available since | 2 February 2005 21:34:09 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Proxy-H is a proxy Trojan.
Troj/Proxy-H allows a remote user to route traffic through the infected system.
When first run, the Trojan copies itself to the Windows system folder as AIG.EXE and creates the following registry entry in order to run itself on system startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
aIg
<Windows system folder>\aIg.exe /a
Troj/Proxy-H may be dropped together with a Trojan of the Goldun family.
|
