Virus Encyclopedia
Welcome to the Virus Encyclopedia of Panda Security.
Proxy.O | |
Threat Level Damage Distribution |
At a glance
 |
| Common name: | Proxy.O |
| Technical name: | Trj/Proxy.O |
| Threat level: | Low |
| Type: | Trojan |
| Effects: |
It allows to get into the affected computer.
It sends the information it has captured to a remote user.
It generates a large amount of network traffic activity with the consequent consumption of bandwidth.
It carries out actions that decrease the security level of the computer.
It uses anti-monitoring techniques in order to prevent it being detected by antivirus companies.
It does not spread automatically using its own means.
|
| Affected platforms:
|
Windows 2003/XP/2000/NT/ME/98/95 |
| First detected on: | May 14, 2007 |
| Detection updated on: | May 14, 2007 |
| Statistics | No |
Proactive protection: | Yes, using TruPrevent Technologies
|
Brief Description | |
Proxy.O is a Trojan, which although seemingly inoffensive, can actually carry out attacks and intrusions. It captures certain information entered or saved by the user, with the corresponding threat to privacy:
. It sends the gathered information to a remote user by any available means: email, FTP, etc. - In the local network:
it generates a large amount of network activity and consumes bandwidth.
It reduces the security level of the computer:
it notifies the attacker that the computer has been compromised and is ready to be used maliciously; it opens one or more ports to allow remote access to the computer and takes action that compromises user confidentiality. It uses several methods in order to avoid detection by antivirus companies: - It terminates its own execution if it detects that it is being executed in a virtual machine environment, such as VMWare or VirtualPC.
Proxy.O does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc. |
Tech details
Effects |
Proxy.O allows hackers to get into and carry out dangerous actions in affected computers, such as capturing screenshots, stealing personal data, etc.
It uses the following techniques to impede detection by antivirus companies: - It terminates its own execution if it detects that it is being executed in a virtual machine environment, such as VMWare or VirtualPC.
It captures certain information entered or saved by the user, with the corresponding threat to privacy: - Keystrokes, in order to obtain information for accessing online banking services, passwords and other confidential information.
It then sends the gathered information to a remote user by any available means: email, FTP, etc. It causes a loss of productivity in the local network to which the compromised computer belongs: - It generates a large amount of network activity and consumes bandwidth.
It reduces the security level of the computer: - It opens one or more ports to allow remote access to the computer and takes action that compromises user confidentiality.
- It notifies the attacker that the computer has been compromised and is ready to be used maliciously.
|
Means of transmission
Proxy.O does not spread automatically using its own means. It needs the attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.
Further Details
Proxy.O has the following additional characteristics:
- It is 46570 bytes in size.
