Dialer.Ulubione

The security risk must be manually installed using the following file:
Ulubione strony.exe

Once installed, the security risk creates the following files:
%System%\chkreg.dll
%System%\powerprof.dll
%Windir%\sysmd.exe

It then creates the following registry entries so that it runs every time Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"Sysr" = "%Windir%\sysmd.exe m "
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"LoadPowerScheme" = "rundll32.exe powerprof.dll CheckPowerProfile"
HKEY_ALL_USERS\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"RegistryCheck" = "rundll32.exe chkreg.dll,CheckRegistry"

The security risk then attempts to access pornographic material by dialling a high-cost telephone number using the modem.

Summary