Dialup Settings Deleted

HAR · Post by **HAR** » 26 Mar 2003, 11:46

<IMG SRC="images/forum/smilies/icon_confused.gif"> Windows 2000 server domain. Win2K Pro & XP Pro workstations. Three of wich has modems with dialup connections. A few weeks ago all three pc´s dialup connections was deleted... all at the same time and day... Recreated the connections, 2 weeks later same thing again. dialup connections was deleted... all at the same time and day...null 1 & half week later, same thing again.
 
 Scanned the whole network for a virus. Internet connection is running a firewall. Not always connected to the internet. Only to retreive e-mail.
 
 Dudes... What the hell is going on? <IMG SRC="images/forum/smilies/icon_confused.gif">

Post by **Cameron_Losco** » 26 Mar 2003, 18:09

Dunno...doesn´t sound right!
 If you don´t have a virus then it sounds like you have a intruder. Have you checked all your logs?

mr_xtc · Post by **mr_xtc** » 26 Mar 2003, 19:24

dude!!!!!
 
 I got your answer, but you aint gonna like it...
 
 
 you have a trojan... but let me first explain...
 It is what you call a dailer, (or porn dialer, or warez dailer)
 what it does is that you visited a naughty website that changed your startup page, or you ran an infected file that changed it... It is not a bad thing BUT... (this is the bad part)
 everytime you connect to the internet the startup page re-download the dailer, which on its own deletes your dailup settings, disconnect your connection, and try to dail an international number that charges you anything between R15-30 a minute, well if you think you are still on an R7 call.... mmm I guess you can figure out the deep crap that you are in...
 
 once it is on your system then it can spread (if made to do so) but it can also stay hidden and activate random...and normaly when you not sitting in front of your pc.
 
 now just in case you think I am talking bull... let me tell you how I found out about this...
 I had one on my pc... I uninstalled it (yup.. they make a fake uninstaller) but when I reboot it re-appears. I traced my startup program but it always happens... then I started thinking like a screwed up hacker... and found that it has about 5 programmes hidden. (duplicates) if you get 4 of them then the last one reinstalls everything.
 
 I send it to SYMANTEC which in my opinion is the best... and they told me what I already known... It is a dailer... they cannot blacklist it as a virus because it does not destroy your pc and does not replicate.
 
 (but you were tricked into installing it the first time???)
 
 but they told me that it was installed in a sispicius way... (how do you tell them that you got it on a crack site??? heh heh)
 well I never visited a crack or pirated site again...
 
 
 hope you learned something about this...
 in case you were wondering ... you must have ran the crack for a program that is installed on all your pc´s... in other words watch out or microsoft will bust you for piracy also... (and get an eyepatch, cause you are a pirate)
 
 what do you think Cameron.... does this sound right... heh heh...
 
 
 ssshhhhhh!!!!
 
 
 _________________
 <marquee><blink><IMG SRC ="http://www.pcformat.co.za/images/forum/ ... ">PURE XTC!!!<IMG SRC ="http://www.pcformat.co.za/images/forum/ ... n_razz.gif">
 </marquee><blink> [ Edited by mr_xtc On Date March 26, 2003 ]