AKStealer.A is a password stealer type Trojan that obtains user names and passwords for the following services: Internet Explorer proxies, Outlook, Google accounts (Gmail, Orkut), ebay, Monster.com, Paypal, e-gold, Careerbuilder.com, GMX.net and Passport.
The information is sent to the website anico24.com by means of a PHP script.
Additionally, it installs a proxy server on the affected computer, and logs the IP address so that the proxy server can be accessed and used later.
AKStealer.A does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.>