Home / Spyware Encyclopedia / Proxy.Ranky << Back

Recommendation to Automatically remove Proxy.Ranky


Our products can remove Proxy.Ranky and thousands of other Virus and Spyware automatically and instantly.

Proxy.Ranky Details


  • Category Proxy
  • Discovered 7/13/2006 11:06:00 AM
  • Modified 8/3/2023 5:31:06 PM
  • Threat Level Critical
  • Category Description
    Proxy Trojan turns the victim's computer into a proxy server. This gives the attacker the opportunity to do everything from your computer, including the possibility of conducting credit card fraud and other illegal activities, or even to use system to launch malicious attacks against other networks.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
Csay.exe 450560jwh512.0.0.1133e5c8fe73030048582392d7e356cbb 
3aa00b55.exe 43590  e4538d31464a65bf76a213e72555a625 
C1FE7DF2.EXE 355328  d72d7790b108c27a8eec480342d8d607 
910c3133.exe 32768  d3758a990fff9705c5edf9bb241ad230 
job32.exe 32768  d3758a990fff9705c5edf9bb241ad230 
98886AA3.EXE 753368  6af38d3c2066f8e93b0441ad55803bac 
Trojan-PSW.Win32.Nilage.hi.exe 10752  6acd149295737db455959b3035bb09af 
Trojan-PSW.Win32.Nilage.gl.dll 47616  17377a49329eb5fb8e1ab259a931f309 
1834a84b.exe 26624  15eae461541c48c6fa76cfe8bcdf3829 
Trojan-PSW.Win32.Nilage.dv.exe 29100  05c1d6e468f61ac3abc6173a523dbfd6 

The following Registry Entries were created:
..\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\"%WIN.SYS32%\job32.exe"\"%WIN.SYS32%\job32.exe:*:Enabled:Windows Task Scheduler"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Printer Spooler"\"%DAS%\admin\Local Settings\Temp\60f9fd5e.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Anti-Virus Update Scheduler V1.39.12R"\"%DAS%\admin\Local Settings\Temp\245982B0.EXE"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"msll"\"%WIN.SYS32%\MSLL32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"sysct2"\"%PF%\rundll32.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"scanrig"\"%WIN%\scanrig.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Runtt1"\"%WIN.SYS32%\Internat.exe"
..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"Printer Spooler"\"%DAS.AU.LS%\Temp\ed9668c7.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Printer Spooler"\"%DAS.AU.LS%\Temp\ed9668c7.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"ctfmonn"\"%DAS.AU.LS%\Temp\0feb4c88.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware


Useful Links

Copyright © 2022 Max Secure Software. All rights reserved.