For the last 2 hours I've been dealing with a trojan that turned off the firewall on the computer with the internet connection.
Trojan.Proxy.GN
Infection risk level: High
Infection description: Trojan.Proxy.GN uses a hidden process to open a random TCP port which allows hackers to gain control of the infected system. It also modifies the host file to redirect popular security related websites to local host.
Also known as Backdoor.BotGet.FtpB.Gen
It took me ages to realise what had happened. Spyware Doctor couldn't remove the trojan that had attached itself to the svchost.exe file, and after a search online I found very few references to it. BitDefender was the only other software that actually detected it. The file is still infected but I'm not sure what to do because the network is working again and the firewall is still turned on.
I'd love to get my hands on the people who are responsible for these totally frustrating disruptions to my online meanderings.
Leave a comment