high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 29 November 2005 14:03:40 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing dialers.
More Information
Dial/DialCar-M is a dialer application.
Dial/DialCar-M includes functionality to access the internet and communicate with a remote server via HTTP.
When run, Dial/DialCar-M displays the following message:
Scegliere "Si" per ricaricare i propri crediti, scegliere "No" per accedere direttamente.
If the user clicks "Si" to the message box and agrees to install the content from the following security warning then the dialer will be run, switching the internet connection to a predetermined number. If the user clicks "No", the application automatically connects to a predetermined website.
If the user agrees to install the program, the dialer copies itself to the Windows folder as Passe-partout.exe and creates a link to this file on the Desktop.
The following registry entry is created to run Passe-partout.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
NETVISIONPasse-partout
<windows>\Passe-partout.exe -A
The following registry entry is also created:
HKCU\Software\NETVISION
Passe-partout
[RandomValue]
The application may also change internet security settings.
|
