Maran.DJ is a Trojan that captures all type of information from the user, as it logs the keystrokes typed in the accessed websites and documents.
For example, it would allow it to obtain data such as the passwords entered in order to be registered in certain websites, such as email services or online banking entities.
Additionally, it registers itself as LSP (Layered Service Provider) in order to monitor the Internet traffic.
Maran.DJ does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.
LSP (Layered Service Provider) is a Windows feature that is used to listen to all the TCP/IP traffic taking place between Internet and the applications that are accessing Internet (such as the web browser, the email client, etc.).
Within this structure, a number of programs are specified. Such programs will carry out certain actions over the TCP/IP traffic; for example, it could be specified a computer security program, which analyses the traffic in search for viruses or other threats before transferring it to the final application of the traffic.
However, this structure can also be used by certain malware, in order to intercept the communication across the Internet, and, what is worse, if they are deleted without taking precautions, the Internet connection will stop working indefinitely.