1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. System Infected: Trojan.Asprox Activity 2

System Infected: Trojan.Asprox Activity 2

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.


This signature detects Trojan.Asprox activity on compromised machine.

Additional Information

When the Trojan is executed, it creates the following files:


Next, the Trojan creates the following registry subkeys:

The program then opens a proxy server on one of the following ports:

TCP port 80
TCP port 82

It then sends HTTP requests to the following locations:



  • Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube