Home / Spyware Encyclopedia / Proxy.Ranky << Back

Recommendation to Automatically remove Proxy.Ranky


Our products can remove Proxy.Ranky and thousands of other Virus and Spyware automatically and instantly.

Proxy.Ranky Details


  • Category Proxy
  • Discovered 7/13/2006 11:06:00 AM
  • Modified 8/3/2023 5:31:06 PM
  • Threat Level Critical
  • Category Description
    Proxy Trojan turns the victim's computer into a proxy server. This gives the attacker the opportunity to do everything from your computer, including the possibility of conducting credit card fraud and other illegal activities, or even to use system to launch malicious attacks against other networks.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
04B47B94.EXE 16504  ff22b4365b9d2f8b8940c1558c82effd 
csrss.exe 25053  fc952822526e5a82d0d1062351201854 
ABB3AED9.EXE 139264  e4ffffd856031c34ac0839afa9064540 
C1FE7DF2.EXE 355328  d72d7790b108c27a8eec480342d8d607 
910c3133.exe 32768  d3758a990fff9705c5edf9bb241ad230 
job32.exe 32768  d3758a990fff9705c5edf9bb241ad230 
ba7451a5.exe 53248  d1e45650bf6e1ba67cd4dbba8fb888e0 
hzdll.dll 95232  cfc057d041e91bc713d609f8a30ad0c5 
cvssdp.exe 19712  c4c276bba794fcb1e192971342815637 
feeea6df.exe 24064  99a8ca05c68ff443999a5e848c0f9406 

The following Registry Entries were created:
..\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%WIN.SYS32%\job32.exe"\"%WIN.SYS32%\job32.exe:*:Enabled:Windows Task Scheduler"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Printer Spooler"\"%DAS%\admin\Local Settings\Temp\60f9fd5e.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Anti-Virus Update Scheduler V1.39.12R"\"%DAS%\admin\Local Settings\Temp\245982B0.EXE"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"msll"\"%WIN.SYS32%\MSLL32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"sysct2"\"%PF%\rundll32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"scanrig"\"%WIN%\scanrig.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Runtt1"\"%WIN.SYS32%\Internat.exe"
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Printer Spooler"\"%DAS.AU.LS%\Temp\ed9668c7.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Printer Spooler"\"%DAS.AU.LS%\Temp\ed9668c7.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ctfmonn"\"%DAS.AU.LS%\Temp\0feb4c88.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.