| 1. | Trojan-Proxy.Win32.Agent.qm This Trojan program makes it possible for a remote malicious user to use the victim machine as a proxy server without the user's knowledge. It is a Windows help file. It is 29548 bytes in size.
Installation
When the infected file is open, the user is shown the following window:
At the same time,...
|
| 2. | Trojan-Proxy.Win32.Agent.lu This Trojan is a Windows PE EXE file. The file is 20,527 bytes in size.
Installation
When launching, the Trojan extracts the following file from its body:
%System%\winwil32.dll — this file is 17 920 bytes in size.
The Trojan also creates the following registry key:...
|
| 3. | Trojan-Proxy.Win32.Agent.y This Trojan launches a proxy server on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 48,128 bytes in size. It is packed using UPX. The unpacked file is approximately 105KB in size.
|
| 4. | Trojan-Proxy.Win32.Agent.is This Trojan program enables a remote malicious user to use the victim machine as a proxy server. The Trojan itself is a Windows PE EXE file 172528 bytes in size, written in Visual C++.
Installation
Once launched, the Trojan registers itself in the system registry, ensuring that it will be launched...
|
| 5. | Trojan-Proxy.Win32.Agent.v This Trojan launches a proxy server on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. The file is approximately 19KB in size. It is packed using PECompact. The unpacked file is approximately 50KB in size.
Installation
When launched, the Trojan...
|
| 6. | Trojan-Proxy.Win32.Agent.q This Trojan launches a proxy server on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. The file is 28,796 bytes in size. It is not packed in any way.
Installation
When launched, the Trojan will copy its executable file as:
%Program...
|
| 7. | Trojan-Proxy.Win32.Agent.x This Trojan launches a proxy server on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. The file is approximately 17KB in size. It is packed using PECompact. The unpacked file is approximately 30KB in size.
Installation
When launched, the Trojan...
|
| 8. | Trojan-Proxy.Win32.Agent.o This Trojan launches a proxy server on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 139,264 bytes in size. It is not packed in any way. It is written in Visual C++.
|
| 9. | Trojan-Proxy.Win32.Bobax.a This Trojan program makes it possible for the infected machine to be used as a proxy server.
Bobax uses a vulnerability in Microsoft LSASS to propagate on command.
The Trojan is written in Microsoft Visual C++, and the body is encrypted. It runs under Windows, and is 20480 bytes in...
|
| 10. | Trojan-Proxy.Win32.Cidra.d This Trojan program turns the victim machine into a proxy server. It is a Windows PE EXE file. It is 27,136 bytes in size. It is packed using UPX. The unpacked file is approximately 60KB in size.
Installation
The Trojan adds the following parameter to the Window system registry in order to...
|