Proxy.3proxy - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Proxy.3proxy

Proxy.3proxy Technical Details

Category		Proxy
Discovered		10/22/2007 3:53:00 PM
Modified		11/12/2008 12:37:35 PM
Threat Level		Critical

Category Description

Proxy Trojan turns the victim's computer into a proxy server. This gives the attacker the opportunity to do everything from your computer, including the possibility of conducting credit card fraud and other illegal activities, or even to use system to launch malicious attacks against other networks.

Notice

Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically in our Research Lab as a result of executing Spyware Files or browsing Internet. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Software.

We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Summary

The following http urls were started:

• elistan.com/logu.php
• viacodecright2.com/s1265.php
• viacodecright2.com/s1265/WebSoftCodecDrivern.exe

The hosts file was updated with the following url-to-ip mappings: NA

The following internet connection was established:

66.90.73.81 : 80
208.53.147.202 : 80

The following Files were created:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\F3950434.EXE			C40AFECBC92912ABF7A36E3AB6990B2C	217974
..\88223321.EXE			1373DDF4AA3C5BF185FD2FB2C6951E11	296261
..\SIMPLEFC.DLL			6D38BB6F6F19C2C22A7EF774BC5D9855
..\WVUOOFYA.DLL			7E2CFB7A936B3E67BDD494EFC247268F
..\EFCCUUOG.DLL			2FB88BC953AEE8AC73E1BE9ACB6EA7D1	37760
..\efcYPgfe.dll			81A075487DC838422CA528F8D0BC7736	44544
..\soxllhya.dll			5F5773D3E040DD7A7F1C9AAAC9431671	69120
..\SSQOIBRP.DLL			9802428D58F0C3EF9D7A83671E7A52C3	253952
..\EXECDOS.DLL			A7CD6206240484C8436C66AFB12BDFBF	5632
..\CBXPGGDA.DLL			5B2578C3456E2797DC1110EF0B6FF944
..\AE8FEEFB.EXE			390A33A7C8FE41D8ABAE1B9A8CC2EF55	41984
..\mhikhr.dll			4E393C93451AF994402267F224348268	132608
..\mpxu.exe			5D3F13453574A7730F29FE3F85A0B669	18944
..\Spyware&Malware Protection.url
..\TEMP\20303.DMP				168461
..\TEMP \MPXA.EXEMPT.EXEATEQOFLR.EXE			D087646CA3382083FF44A7D8D490C643
..\TEMP\MPXPASS.EXE			303221DBE9821D62D46220D11249525E	216726
..\ExecDos.dll			A7CD6206240484C8436C66AFB12BDFBF	5632
..\WBQXFPGL.DLL			7C555F6D810AEDA3CD4D2D6A20D15DFB
..\A90CE336.EXE			1CEDD5CAED0B6F7E409D7A57DCA5B030
..\EXECDOS.DLL
..\XXYABXUK.DLL			EB9CB0D4BCAA4FB102DB16B57FF8AB9C
..\AWTTUTRJ.DLL			2D7CB8C11DDD973F4E99FAFEAE5E8DBD	37760
..\hgGwWmjj.dll			81A075487DC838422CA528F8D0BC7736	44544
..\kek.exe			8F12F56CAD2A08C1FFDDA1501302D6BD

The following Registry Entries were created:

•	..\Software\Microsoft\CONTIM
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"kek"\"%WIN.SYS32%\kek.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"MPT"\"%WIN.SYS32%\MPT.EXE"
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1EEBF144-58E5-445A-AEEC-93057287226E}
•	..\Software\Classes\Clsid\{21E116C7-8F86-4DCD-81F0-1A09D121F4BA}
•	..\Software\Classes\Clsid\{4eabed81-76b2-4c31-a748-153d42452930}
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DBDB6F9-7D44-4686-9A99-196363695CA8}
•	..\Software\Classes\Clsid\{4DBDB6F9-7D44-4686-9A99-196363695CA8}
•	..\Software\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLs"\"bwhbya.dll"
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9B904910-78A4-489D-A825-5111B883A5B2}
•	..\Software\Microsoft\fias4013
•	..\Software\Microsoft\RDFA
•	..\Software\Classes\Clsid\{1EEBF144-58E5-445A-AEEC-93057287226E}
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7A7DB0C7-0D81-4810-BAC7-3FDAB3951D65}
•	..\Software\Classes\Clsid\{7A7DB0C7-0D81-4810-BAC7-3FDAB3951D65}
•	..\Software\Classes\Clsid\{6CBE6300-759B-447A-B406-31B86293E390}
•	..\Software\Microsoft\84fd8446
•	..\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4eabed81-76b2-4c31-a748-153d42452930}
•	..\Software\Classes\Clsid\{9B904910-78A4-489D-A825-5111B883A5B2}
•	..\Software\Microsoft\INTERNET EXPLORER\MAIN\"START PAGE"\"HTTP://SOFTWAREREFERRAL.COM/JUMP.PHP?WMID=6010&MID=MJI6OJG5&LID=2"

Recommendation to remove Proxy.3proxy

Spyware Detector can remove Proxy.3proxy, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized E-mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
	Speed up your computer and increase browsing performance by deleting Spyware & Adware
	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat