high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 19 January 2005 22:18:03 (GMT) |
| Last updated | 23 December 2005 10:22:04 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing dialers.
Windows NT/2000/XP/2003
In Windows NT/2000/XP/2003 you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
and delete it if it exists.
Close the registry editor.
usbn
C:\Windows\System32\usbn.exe -go -c
More Information
Dial/Dialer-EB is a dialler application.
The dialler accesses Windows telephony settings in order to dial a
premium rate number. This telephone number is specified in an encrypted
configuration file that the application downloads from a preconfigured
website.
Dial/Dialer-EB copies itself to the file usbn.exe in the Windows system
folder and internt.exe in the Windows folder.
In order to be automatically run after login, the dialler creates the
following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
usbn
"C:\Windows\System32\usbn.exe -go -c<cust> -w<w>"
Dial/Dialer-EB may create shortcuts to itself, in the Start Menu or on the
Desktop, with the following names:
Dating.lnk
XXX NOW.lnk
Me Naked.lnk
For your eyes only.lnk
|
