Content
PornDial-108
- Type
- Program
- SubType
- PornDialer
- Discovery Date
- 12/12/2002
- Minimum DAT
- 4238 (12/18/2002)
- Updated DAT
- 4339 (03/17/2004)
- Minimum Engine
- 5.1.00
- Description Added
- 12/12/2002
- Description Modified
- 12/13/2002 8:56 AM (PT)
Tab Navigation
Characteristics
This detection is for a porn dialer application. Upon running the dialer copies itself into the following directory:
C:\Program Files\dialers\hot_netherlands\hot_netherlands.exeThe dialer hooks the Registry to run itself at system startup. Shortcuts are also added to the Windows Start Menu. A browser window is opened providing links to various porn-related web sites.
This program is not malicious and does not attempt to conceal its presence. Whilst running, an icon is visible on the taskbar:
![[PornDial-108 systray icon]](http://vil.nai.com/images/99879.gif)
(This image is also that used for the icon for the main executable.)
Though not malicious, application-type detection is being added for this "potentially unwanted application". The current command-line scanner makes use of such detections (via the /PROGRAM switch), as does VirusScan 7 (via configuration options).
Removal
All Users:
Use specified engine and DAT files for detection and removal.
Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).
Aliases
Aliases
- Dialer-108
