TrojanProxy.Win32.Sobit

Overview

Category

Proxy: Any firewall that blocks and re-creates a connection between two points. As a defensive tool, a proxy in an organization hides a user from the outside world. As a pest, a proxy hides an attacker from a user. As a pest, a proxy is a tool that can be used to anonymize a connection between an attacker and your machine, making the connection more difficult to trace. The attacker interacts with the proxy; the proxy translates the interaction and interacts with your machine. As attack tools, SMTP and FTP proxies are often used in conjunction with Firewall Killers, Downloaders, RATs, and Trojans.

Origins

Date of Origin

July, 2004

Detection and Removal

Manual Removal

Follow these steps to remove TrojanProxy.Win32.Sobit from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:

Remove Files:

Remove these files (if present) with Windows Explorer:

TrojanProxy.Win32.Raznew.gen TrojanProxy.Win32.Small TrojanProxy.Win32.Small.a TrojanProxy.Win32.Small.b TrojanProxy.Win32.Small.h TrojanProxy.Win32.Sobit TrojanProxy.Win32.Steredir.b TrojanProxy.Win32.Uzbet TrojanProxy.Win32.VB.a TrojanProxy.Win32.Webber