Updated: February 13, 2007 11:36:47 AM
Type: Dialer
Risk Impact: High
File Names:
@liberamovilespt.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
When Dialer.UDIS runs, it performs the following actions:
- Creates the folder, C:\@liberamovilespt, and copies itself there.
- Adds the value:
"@liberamovilespt" = "C:\@liberamovilespt\[ORIGINAL FILE NAME].exe"
to the registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
so that the risk runs when Windows is started.
- Starts itself as a service named @liberamovilespt.
- Adds an icon to the system tray.
- Displays a warning message and explains what the program will do. Before connecting, Dialer.UDIS requires user to accept the terms and conditions. It then attempts to connect to an offshore dial-up portal for adult content sites. This portal is a pay for service number.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
