Dialer threats
Author
Discussion

Leftie

Original Poster:

11,838 posts

265 months

Thursday 10th August 2006
quotequote all
Twice this week a scan with Norton has detected 'Dialer' threats on my PC. Usually Norton spots any virus before it gets onto the PC.


Does anyone know how are these getting through, what they do and what the risk is?

aranell

868 posts

254 months

Thursday 10th August 2006
quotequote all
Is your PC totally up to date with windows updates?
Dialers tend to try and change the phone number that you are calling when you access the internet so that you ring a premium rate number, get a hefty phonebill and they make lot of money. If you are running your PC as a local admin, they can download themselves in the backgound if you go to an infected site. Some are also able to download themselves to your PC if you have an internet connection (you don't have to actually be surfing for this to happen). If you find norton is picking up the same dialer repeatedly, it is either because you are visiting a particular site repeatedly and hence downloading the dialer each time, or Norton isn't fully getting rid of the problem and it so the dialer can keep reinstalling itself.

Firstly, make sure you are totally up to date with your windows patching.
Delete all your temporary internet files and cookies
Ensure you are using a safer browser than IE6 (Firefox, Opera etc)
Update Norton so it has the latest updates.
Download a spyware checker and ensure it is fully updated
Boot your PC into safe mode
Run a virus scan and then run a spyware check

This should hopefully get rid of the dialer.

scared but happy

24,147 posts

259 months

Thursday 10th August 2006
quotequote all
Are you still on dialup?

thepassenger

6,962 posts

265 months

Thursday 10th August 2006
quotequote all
Indeed if your not on dialup (or have no modem installed) watching the little porn dialers go mental can be quite funny.

Generally they embed themselves in the startup sequence of the PC so that shortcuts and the EXE it points to are regenerated for a hidden archive... often they can be sods to get rid of.

As others have suggested, Get a few good Spyware killers (Spybot, Adaware) and make sure your AV product is as up-to-date as possible. Reboot in to safe mode (tap F8 during boot and select 'Safe mode' go grab a beer whilst it boots) Let loose the dogs of war on your system repeatedly until each one reports everything is clear.
Reboot in to normal mode.

For surfing sites which inject dialers in to your system, grab a copy of Firefox or Opera, they CAN be compromised (I've seen Java based delivery of malware to deal with Firefox) but are much harder to do so.

mph999

2,778 posts

250 months

Thursday 10th August 2006
quotequote all
try hackstop or stophack ????

Basically it sits there and prevent any no. being dialled aart from those you permit.

Martin

thepassenger

6,962 posts

265 months

Thursday 10th August 2006
quotequote all
mph999 said:
try hackstop or stophack ????

Basically it sits there and prevent any no. being dialled aart from those you permit.

Martin


Never heard of that one... but good idea.
Only downside is dialers often come with other stuff like keyloggers, advertising robots and other 'fun' stuff. They're better off dead than bypassed.

Leftie

Original Poster:

11,838 posts

265 months

Friday 11th August 2006
quotequote all

Not dial up, straight broadband.

Norton cleared it but I am running my virus checker again tohight to see if it has reinfected.