Sophos

Dial/TlfLic-A

Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Dial/TlfLic-A is a dialler application.

The installation executable for Dial/TlfLic-A creates the files dl0001.exe,
trun.dll, trun.exe and wincall.exe in the Windows folder and creates the
following registry entries, so that trun.exe is run automatically on startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
TimeService = C:\WINDOWS\trun.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
TimeService = C:\WINDOWS\trun.exe

trun.exe (with the assistance of trun.dll) waits for a specific number of
keyboard and/or mouse events and then launches dl0001.exe.

dl0001.exe is a dialler application which tries to load web pages related to
online gambling and sex. Internet Shortcuts to these web sites may be created
on the Desktop.

wincall.exe is identical to dl0001.exe.

The installation executable may also download and run new versions of the
software or related applications such as Troj/Spygal-A.

The installation executable for Dial/TlfLic-A may be installed by
Troj/Downldr-AM.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer