Home / Spyware Encyclopedia / Proxy.Jubon << Back

Recommendation to Automatically remove Proxy.Jubon


Our products can remove Proxy.Jubon and thousands of other Virus and Spyware automatically and instantly.

Proxy.Jubon Details


  • Category Proxy
  • Discovered 11/4/2008 4:44:33 PM
  • Modified 7/18/2023 5:15:24 PM
  • Threat Level High
  • Category Description
    Proxy Trojan turns the victim's computer into a proxy server. This gives the attacker the opportunity to do everything from your computer, including the possibility of conducting credit card fraud and other illegal activities, or even to use system to launch malicious attacks against other networks.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
k.exe 498202Microsoft Corporation5.0.2134.1d9404eb0bbecff33ea3c637cf85e1a24 
a6b1959b.exe 32768abba1, 0, 0, 61659820a89f9490795b25753e215d180 
1FBACA69.EXE 32768 1, 0, 0, 1819e95513eac8f972337087389cb4563 
Trojan-PSW.Win32.Lmir.pw.dll 21504  e8edb03753aeb30395ad87be80eb2270 
TROJAN-PSW.WIN32.LMIR.QM.dll 23248  d8e146bdbb929f4aa4f41424aaedf9f5 
TROJAN-PSW.WIN32.LMIR.QT.dll 4608  ca42b1acddf1f29065bc220842112dc0 
sanxqesrf.dll 5029  b17459fe4d013dbb608f86707f360d8a 
MUTISK.dll 212034  a4aa9c484e5fe821a1033082aa5ca793 
Trojan-PSW.Win32.Lmir.qs.dll 211954  a2cbe380ada8ddfa356e3fdc1613a41d 
Trojan-PSW.Win32.Lmir.q.exe 55296  85f623bc2a06f03e871debcaba271638 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\"{4D65F220-63CA-11D8-9BDB-FD58F515A839}"\"Maihook1005"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"k.exe"\"k.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"soundmen"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.QT.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"rundlle"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.QM.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows Media SP.2.1.7"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.Q.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"QuickTime Task.s"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.PP.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\";Rundllw"\"%WIN.SYS32%\TROJAN-PSW.WIN32.LMIR.QB.exe"
..\Software\Classes\TROJAN-PSW.WIN32.LMIR.QS.ShellExecuteHook1005\(Default)
..\Software\Classes\MUTISK.ShellExecuteHook1005\(Default)
..\Software\Classes\qpworkfile1005pv\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.