re: Trojan Horse Phone Dialler
Wednesday, July 16, 2003 at 7:32 pm Windows Me Annoyances Discussion Forum
Posted by jabuck
(2274 messages posted)
Steven, Read this post on the dialer http://www.annoyances.org/exec/forum/winme/t1045523480
The only thing I could add would be download and install spyblaster
it stops many spywares before they install themselves. ---jabuck
On Wednesday, July 16, 2003 at 4:14 pm, Steven Bradley wrote:
>
>Dear Sirs
>
>I note that Emails received from OnePlayer and MP3.com are not certified as checked
>by AVG. Is this significant using Outlook?
>
>The following is a message sent to the UK’s premier rate phone call service
>ICSTIS.
>
>Further to my complaint about being billed for a call to Super Prem on 09090277021
>(UK) costing over £1 per minute which I believed to be Internet related, my phone
>company, Telewest agree that this was virus related, the call was apparently made
>within 10 seconds of closing my normal ISP connection. I think this happened as
>a result of clicking on a link received from MP3 for a music connection. I receive
>regular anti virus software updates from AVG and the latest run, not a fortnight
>ago when the call was made, has shown a virus called Trojan Horse Phone Dialler
to
>be present and “healed”. An Internet search using Google has shown that
>many other people and organisations, mainly in the USA have suffered problems with
>this virus and consequent premium rate phone bills (there are also solutions?).
>
>I suspect that this problem involves calling the number above via a link in an Email
>offering choices of music to listen to (some of which are completely legitimate).
> It may well be that the fraud only happens if you are not already connected to
your
>usual ISP, other phone viruses have impersonated normal ISP’s but at Premium/Overseas
>rates. Calling the number ordinarily just produces computer noise so it seems
you
>can only access this site if you have the virus. I believe the source to be connected
>with RealOne player and MP3.com. after all it meaningless unless you have a media
>player.
>
>This virus seems to have been around for a while and is maybe “evolving”
>to be more financially viable to its perpetuators. Is there anything you can do
>to shut down this scam?
>
> I’ve yet to hear anything from ICSTIS by the way.
>
>Interestingly my anti virus programme which checks Emails appears to have been disabled
>by Emails from both RealOne player and MP3.
>Sorry about the length of this but if you are interested in the files infected they
>are as follows:
>
>Documents and Settings\Steven Charles Bradl\Local Settings\Temporary Internet Files\CONTENT.IE5\S9AN4T63\3156_1~1.EXE
>repaired
>C:\WINNT\Downloaded Program Files\3156.EXE repaired
>C:\WINNT\SYSTEM32\windialup\3156\3156.EXE repaired
>
- Written in response to:
- Trojan Horse Phone Dialler (Steven Bradley: Wednesday, July 16, 2003 at 4:14 pm)
There are presently no replies to this message.
|
|
All messages in this thread [show all]
 |  | re: Trojan Horse Phone Dialler (jabuck: Wed, Jul 16, 2003, 7:32 pm) |
| |
| |
Return to the Windows Me Discussion Forum
|
|