Home / Spyware Encyclopedia / Proxy.3proxy << Back

Recommendation to Automatically remove Proxy.3proxy


Our products can remove Proxy.3proxy and thousands of other Virus and Spyware automatically and instantly.

Proxy.3proxy Details


  • Category Proxy
  • Discovered 8/13/2008 4:06:36 PM
  • Modified 4/9/2022 10:25:41 AM
  • Threat Level Critical
  • Category Description
    Proxy Trojan turns the victim's computer into a proxy server. This gives the attacker the opportunity to do everything from your computer, including the possibility of conducting credit card fraud and other illegal activities, or even to use system to launch malicious attacks against other networks.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
95110e31.exe 664103 2.4.1624.6898fca0a8503309ce028d904a3f2aa75 
alg.exe 37888  f7c5966c88f141961563936eaa4a9750 
2EDB8D5B.EXE 26624  edbfe00c2a973b0d127df22c545097c2 
beyezuki.dll 79872  ea6a84e6d5c74c2c6a046063815e9070 
repudana.dll 49152  dcb937a8c8dedd14569e23f7b1d0f595 
F3950434.EXE 217974  c40afecbc92912abf7a36e3ab6990b2c 
MPXPASS.EXE 217974  c40afecbc92912abf7a36e3ab6990b2c 
0-74bdbefc.exe 229376  c1b813c8662f4565d410ff8a61d66d7d 
1-74bdbefc.exe 229376  c1b813c8662f4565d410ff8a61d66d7d 
74bdbefc.exe 229376  c1b813c8662f4565d410ff8a61d66d7d 

The following Registry Entries were created:
..\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%WIN.SYS32%\mpxa.exe"\"%WIN.SYS32%\mpxa.exe:*:Enabled:mpxa"
..\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%PF%\Microsoft Office\Office\WINWORD.EXE"\"%PF%\Microsoft Office\Office\WINWORD.EXE:*:Enabled:WINWORD"
..\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\"{98672103-AFBE-4434-92D2-692A124CD60F}"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"kenuhesogu"\"Rundll32.exe "%WIN.SYS32%\repudana.dll",s"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"CPM7b8dcba1"\"Rundll32.exe "%WIN.SYS32%\zareheli.dll",a"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"78bef83d"\"rundll32.exe "%WIN.SYS32%\beyezuki.dll",b"
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98672103-AFBE-4434-92D2-692A124CD60F}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{933CD473-B65E-4C28-B5EA-9B033AB229A5}\(Default)
..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{80539daf-a296-4a3c-81d8-345156a02de7}\(Default)
..\Software\Classes\Clsid\{80539daf-a296-4a3c-81d8-345156a02de7}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware