high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | January 2005 (3.89) |
| Protection available since | 13 November 2004 16:16:43 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Ranck-BA is a proxy Trojan that allows a remote intruder to route internet traffic through an infected computer.
Troj/Ranck-BA will run continuously in the background listening on a port.
Periodically, Troj/Ranck-BA will contact a pre-defined URL to report that the computer has been infected and to give details of the port number that the Trojan is listening on.
In order to start automatically each time a user logs on, Troj/Ranck-BA sets the following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
SysData
<path to Trojan>
Sophos's anti-virus products include proactive protection technology, which can defend against new threats without requiring an update. Sophos customers have been protected against Troj/Ranck-BA (detected as Troj/Ranck-Gen) since version 3.85.
|
