Annoyances.org
Home » Windows Me Discussion Forum » Message 1058409174 Search | Help | Home
  
Tip: Run a free scan for common Windows errors ad

re: Trojan Horse Phone Dialler
Wednesday, July 16, 2003 at 7:32 pm
Windows Me Annoyances Discussion Forum
Posted by jabuck (2274 messages posted)


Steven, Read this post on the dialer http://www.annoyances.org/exec/forum/winme/t1045523480 The only thing I could add would be download and install spyblaster it stops many spywares before they install themselves. ---jabuck


On Wednesday, July 16, 2003 at 4:14 pm, Steven Bradley wrote:
>
>Dear Sirs
>
>I note that Emails received from OnePlayer and MP3.com are not certified as checked
>by AVG. Is this significant using Outlook?
>
>The following is a message sent to the UK’s premier rate phone call service
>ICSTIS.
>
>Further to my complaint about being billed for a call to Super Prem on 09090277021
>(UK) costing over £1 per minute which I believed to be Internet related, my phone
>company, Telewest agree that this was virus related, the call was apparently made
>within 10 seconds of closing my normal ISP connection. I think this happened as
>a result of clicking on a link received from MP3 for a music connection. I receive
>regular anti virus software updates from AVG and the latest run, not a fortnight
>ago when the call was made, has shown a virus called Trojan Horse Phone Dialler to
>be present and “healed”. An Internet search using Google has shown that
>many other people and organisations, mainly in the USA have suffered problems with
>this virus and consequent premium rate phone bills (there are also solutions?).
>
>I suspect that this problem involves calling the number above via a link in an Email
>offering choices of music to listen to (some of which are completely legitimate).
> It may well be that the fraud only happens if you are not already connected to your
>usual ISP, other phone viruses have impersonated normal ISP’s but at Premium/Overseas
>rates. Calling the number ordinarily just produces computer noise so it seems you
>can only access this site if you have the virus. I believe the source to be connected
>with RealOne player and MP3.com. after all it meaningless unless you have a media
>player.
>
>This virus seems to have been around for a while and is maybe “evolving”
>to be more financially viable to its perpetuators. Is there anything you can do
>to shut down this scam?
>
> I’ve yet to hear anything from ICSTIS by the way.
>
>Interestingly my anti virus programme which checks Emails appears to have been disabled
>by Emails from both RealOne player and MP3.
>Sorry about the length of this but if you are interested in the files infected they
>are as follows:
>
>Documents and Settings\Steven Charles Bradl\Local Settings\Temporary Internet Files\CONTENT.IE5\S9AN4T63\3156_1~1.EXE
>repaired
>C:\WINNT\Downloaded Program Files\3156.EXE repaired
>C:\WINNT\SYSTEM32\windialup\3156\3156.EXE repaired
>


Written in response to:
Trojan Horse Phone Dialler (Steven Bradley: Wednesday, July 16, 2003 at 4:14 pm)

There are presently no replies to this message.

All messages in this thread [show all]
-Trojan Horse Phone Dialler (Steven Bradley: Wed, Jul 16, 2003, 4:14 pm)
*re: Trojan Horse Phone Dialler (jabuck: Wed, Jul 16, 2003, 7:32 pm)
-re: Trojan Horse Phone Dialler (Ogg: Thu, Jul 17, 2003, 2:01 pm)
-re: Trojan Horse Phone Dialler (frank: Wed, Aug 27, 2003, 6:22 pm)
*re: Trojan Horse Phone Dialler (Ogg: Thu, Aug 28, 2003, 8:49 pm)
Return to the Windows Me Discussion Forum


All content at Annoyances.org is Copyright © 1995-2009 Creative Elementtm All rights reserved.
Please do not plagiarize; redistributing these pages without permission is strictly prohibited.