Dial/Norb-A

Category: Viruses and Spyware Protection available since:25 Jun 2003 00:00:00 (GMT)
Type: Trojan Dialer Last Updated:25 Jun 2003 00:00:00 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Dial/Norb-A is a German language porn dialler.

When executed Dial/Norb-A copies itself to C:\<Windows>\Dialer\_X-FINDER.EXE
and sets the following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
deupdchk = "C:\<Windows>\Dialer\_X-FINDER.EXE"

so that it can be executed every time the computer restarts.

Links are also placed on the taskbar, desktop, start menu and program menu.

The file DIAL32.INI is also created in the Windows folder which holds the dial
settings that can be used by the main program to establish a connection to
the Internet.

download Try Sophos products for free
Download now