high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | April 2006 (4.04) |
| Protection available since | 8 March 2006 14:48:04 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Ranck-DX runs continuously in the background listening on a randomly generated port and allows HTTP traffic to be relayed through the computer.
The Troj/Ranck-DX proxy server may be used to forward spam.
Troj/Ranck-DX includes functionality to provide a proxy server. Troj/Ranck-DX runs continuously in the background listening on a randomly generated port and allows HTTP traffic to be relayed through the computer.
The Troj/Ranck-DX proxy server may be used to forward spam.
When Troj/Ranck-DX becomes active it sends a notification message to a remote location, specifying the IP address of the current computer and the randomly generated port number which will typically be within the range 10000 - 50000.
Troj/Ranck-DX includes functionality to provide a proxy server.
The following registry entry is created to run Troj/Ranck-DX on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
<variable>
<pathname of the Trojan executable>
|
