|
Malware -
Rogues
|
|
The obvious symptom of the infection of this E group dialer is the presence of desktop shortcuts to porn sites. If you see similar links appearing on your desktop, scan your computer for the presence of the dialer. It creates a folder of the name "Instant Access" on the computer's hard disk. It is also known as Dialer.Instant_Access, Dialer-185, Trojan-Downloader.Win32.Wintrim
These are some of the links that appeared on recently infected computers Sexslaves.lnk NoCreditCard.lnk Private.com.lnk Hotel Heiress.lnk sexe69.lnk Fun-Games.lnk These folders were found on the infected hard drives %ProgramFiles%\Instant Access And these files were found on the infected hard drives %System%\nsinet.exe %Windir%\dialerexe.ini If C drive is your primary hard disk partition where windows in installed, then - %DesktopDir% is C:\Documents and Settings\[UserName]\Desktop.
- %Programs% is C:\Documents and Settings\[UserName]\Start Menu\Programs.
- %ProgramFiles% is C:\Program Files.
- %System% is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
- %Windir% is C:\Windows\
|