Summary

Summary
Action
More Information
| Detected by | All Sophos products |
|---|---|
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing dialers.
More Information
Dial/TlfLic-A is a dialler application.
The installation executable for Dial/TlfLic-A creates the files dl0001.exe,
trun.dll, trun.exe and wincall.exe in the Windows folder and creates the
following registry entries, so that trun.exe is run automatically on startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
TimeService = C:\WINDOWS\trun.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
TimeService = C:\WINDOWS\trun.exe
trun.exe (with the assistance of trun.dll) waits for a specific number of
keyboard and/or mouse events and then launches dl0001.exe.
dl0001.exe is a dialler application which tries to load web pages related to
online gambling and sex. Internet Shortcuts to these web sites may be created
on the Desktop.
wincall.exe is identical to dl0001.exe.
The installation executable may also download and run new versions of the
software or related applications such as Troj/Spygal-A.
The installation executable for Dial/TlfLic-A may be installed by
Troj/Downldr-AM.
