high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | April 2005 (3.92) |
| Protection available since | 23 February 2005 16:57:28 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Ranck-CM is a proxy Trojan that allows a remote attacker to route internet traffic through the infected computer while running continuously in the background.
Troj/Ranck-CM sends information to a number of websites, alerting them to the fact that the computer is infected by the Trojan.
Troj/Ranck-CM sets the following registry entry to ensure that it is run automatically at computer logon:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
vadseinst
<path to Trojan>
|
