Sophos

Sophos blogs

Dial/DialCar-Z

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 14 August 2006 13:58:46 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Dial/DialCar-Z is a premium rate dialer.

When run, the dialer copies itself to <Windows>\NETVISION.exe

The Dialer creates the following files:

<Programs>\FASTTRACK\NETVISION Disinstalla.lnk
<Programs>\FASTTRACK\NETVISION.lnk

These files can be removed safely.

The following registry entries are created to run NETVISION.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
FASTTRACKNETVISION
<Windows>\NETVISION.exe -A

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
FASTTRACKNETVISION
<Windows>\NETVISION.exe -A

Registry entries are created under:

HKCU\Software\FASTTRACK\

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer