Dial/Scom-D is a premium rate dialler application.
Dial/Scom-D will create the folder C:\<Program Files>/pinfo/dialers/lisa
and copy itself to this folder with the filename lisa.exe.
The following registry entry will be created to start the dialler application
when a user logs on to Windows:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Lisa
<Program Files>\PInfo\Dialers\Lisa\Lisa.exe /dontdial
Dial/Scom-D will also create a clean Microsoft DLL in the Windows folder named rnaph.dll. This file may be deleted if the user wishes.
Dial/Scom-D may attempt to download and execute other files from the internet and sent system information to a pre-defined website.
Dial/Scom-D will also place shortcuts to itself on the computers Desktop, the strt menu and the start menu's Programs folder.
The following registry entry will also be created:
HKCU\Software\Netscape\Netscape Navigator\Suffixes\application
x-htnw
htnw
HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications
<Program Files>\PInfo\\Dialers\\Lisa\\Lisa.exe
yes
HKCU\Software\Netscape\Netscape Navigator\Viewers\application
x-htnw
<Program Files>\PInfo\\Dialers\\Lisa\\Lisa.exe %1
HKCU\Software\Netscape\Netscape Navigator\Viewers
TYPE35
application/x-htn
HKCU\Software\Pinfo\Dialers\Lisa
AC
dword:00000001
HKCU\Software\Pinfo\Dialers\Lisa
RLC
dword:00000000
HKCU\Software\Pinfo\Dialers\Lisa
MIMETYPE_DESCRIPTION
.htnw
HKCU\Software\Pinfo\Dialers\Lisa
SDNO
dword:00000001
HKCU\Software\Pinfo\Dialers\Lisa
CRR_ID
dword:000001f4
HKCU\Software\Pinfo\Dialers\Lisa
Modem_Found
dword:00000000
HKCR\.htnw
(default)
htnw File
HKCR\.htnw
Content Type
application/x-htnw
HKCR\MIME\Database\Content Type\application/x-htnw
Extension
.htnw
HKCR\htnw File
(default)
htnw Data
HKCR\htnw File
EditFlags
hex:00,00,01,00
HKCR\htnw File
shell\(default)
open
HKCR\htnw File\shell\open\command
(default)
<Program Files>\PInfo\\Dialers\\Lisa\\Lisa.exe %1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Lisa
<Program Files>\PInfo\\Dialers\\Lisa\\Lisa.exe /dontdial
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lisa
UninstallString
<Program Files>\PInfo\\Dialers\\Lisa\\Lisa.exe /uninstall
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lisa
DisplayName
Lisa
HKLM\SOFTWARE\Pinfo\Dialers\Lisa
SDNO
dword:00000001