Trojan Horse Phone Dialler
Wednesday, July 16, 2003 at 4:14 pm
Windows Me Annoyances Discussion Forum
Posted by Steven Bradley
(1 messages posted)
Dear Sirs
I note that Emails received from OnePlayer and MP3.com are not certified as checked
by AVG. Is this significant using Outlook?
The following is a message sent to the UK’s premier rate phone call service
ICSTIS.
Further to my complaint about being billed for a call to Super Prem on 09090277021
(UK) costing over £1 per minute which I believed to be Internet related, my phone
company, Telewest agree that this was virus related, the call was apparently made
within 10 seconds of closing my normal ISP connection. I think this happened as
a result of clicking on a link received from MP3 for a music connection. I receive
regular anti virus software updates from AVG and the latest run, not a fortnight
ago when the call was made, has shown a virus called Trojan Horse Phone Dialler to
be present and “healed”. An Internet search using Google has shown that
many other people and organisations, mainly in the USA have suffered problems with
this virus and consequent premium rate phone bills (there are also solutions?).
I suspect that this problem involves calling the number above via a link in an Email
offering choices of music to listen to (some of which are completely legitimate).
It may well be that the fraud only happens if you are not already connected to your
usual ISP, other phone viruses have impersonated normal ISP’s but at Premium/Overseas
rates. Calling the number ordinarily just produces computer noise so it seems you
can only access this site if you have the virus. I believe the source to be connected
with RealOne player and MP3.com. after all it meaningless unless you have a media
player.
This virus seems to have been around for a while and is maybe “evolving”
to be more financially viable to its perpetuators. Is there anything you can do
to shut down this scam?
I’ve yet to hear anything from ICSTIS by the way.
Interestingly my anti virus programme which checks Emails appears to have been disabled
by Emails from both RealOne player and MP3.
Sorry about the length of this but if you are interested in the files infected they
are as follows:
Documents and Settings\Steven Charles Bradl\Local Settings\Temporary Internet Files\CONTENT.IE5\S9AN4T63\3156_1~1.EXE
repaired
C:\WINNT\Downloaded Program Files\3156.EXE repaired
C:\WINNT\SYSTEM32\windialup\3156\3156.EXE repaired
On a completely different view if people have problems using Windows 2000 they need
at least 128Mb’s of RAM as Windows consumes 70Mbt’s on it’s own.
Yours faithfully,
Steven Bradley
tebradley@ic24.net
|
Responses to this message:
|
|
All messages in this thread [show all]
 | Trojan Horse Phone Dialler (Steven Bradley: Wed, Jul 16, 2003, 4:14 pm) |
| |
| |
Return to the Windows Me Discussion Forum
|
|
