These dialers are usually ActiveX components. Have your brother go to Windows->Downloaded program files, then Right-click on any entry with dial or dialer in the name and uninstall(remove) them. Actually he can remove all of them since if they are needed at a site, he'll be asked to reinstall them when the site is next visited.
Unplugging his modem while the computer is running will stop the dialer from connecting.
You don't mention if he has broadband or a dial-up Internet connection. If he has broadband, after he's unplugged his modem, have him download and install (If he has dial-up, you, or a friend, can do this and burn it to a CD for him.) Ad-Aware and Spybot - Search & Destroy.
It is very important to UPDATE the reference files for BOTH of these programs before you run them the first time, then frequently thereafter to ensure the very latest in detection and removal. Click Here and Here for illustrated instructions on updating and how to use these programs.
Both Spybot Search & Deatroy and Ad-Aware will remove the most common diallers with a big plus in that they will help keep his computer clean once all infections are removed.
Keep us updated so further diagnostics can be used if the problem persists.:smileyhappy:
Hey, thanks for the information. We are aware of Spybot and have used it in the past to solve problems and it worked well Oddly enough, unless another worm directed him, he doesn't visit the X rated sites as suspected but I will give him the advise just the same. :smileywink: I will post again after he has tried the suggestions but it might be a couple of days.
The sad thing is, you don't have to visit X-rated sites to pick up an automatic dialer. Many times the sites will add an invisible "bug" on a site and when you visit it, it triggers a "drive-by download" that the victim is totally unaware of.
The newest versions of Spybot and Ad-Aware should take care of the problem. Once it is gone there are a couple of (also free), very small programs that will stop this sort of thing from happening in the future. They are SpywareBlaster, and IE-SPYAD.
SpywareBlaster blocks bad ActiveX and malevolent cookies. IE-SPYAD puts over 4000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
Both programs you run once, then just update frequently. :smileyhappy:
George
PS There are some other diagnostic tools we can use if for some reason Spybot and Ad-Aware don't remove the problem. G
Message Edited by SpotCheckBilly on 10-16-2004 11:52 PM
Hey, thanks for that piece of info. I think I recall another person telling me about X rated pop-ups and I know they never visited those sites. You would think some people have too much time on their hands if they enjoy sitting around figuring out ways to cause people problems.
I will be talking to my brother in the next couple of days and will post a follow up regarding his status. I really appreciate the help I have received with his issue.
Yes, too much time. Not to mention greed. The people creating the code causing those popups get paid quite well for their handiwork. Often additionally, a pay-per-hit, commission as well. With the money generated by the auto-dialers, you can imagine how luctative the whole thing could be if even a fraction of the popups result in a hit on the target site.
This is also why the authors of this, and other types of malware, keep making it more difficult and remove their garbage.
More great information. I appreciate the concern and advice from these posts.
It looks like I will be the one doing the repair for my brother so it may be a week or more before I report back on how things go (we live about 100 miles apart). He is a little uneasy about trying some of these things because he doesn't understand some of the terminology. I am no guru but I am familiar with the suggestions and know enough to understand what is being said.
Again my thanks for the help and I will update the progress after I get the chance to help my brother out.
Just as an update on the status, I gave my brother another PC and I will be getting his old one later on to format the hard drive and start over. So as far as his dialer problems are concerned, I won't be trying to fix them, I plan to eliminate them.
Thanks again to all who contributed to my posting. It was a great help.
jamez kann
860 Posts
0
October 16th, 2004 18:00
3rd A Download Spybot Tutorials on how To Install Spybot Search and Destroy
B Download Ad-aware SE Personal 1.03 Tutorial using Ad-aware And tell your bro to stop visiting x rated sites ;) without protection
SpotCheckBilly
932 Posts
0
October 16th, 2004 19:00
Hey m_e_thomas,
These dialers are usually ActiveX components. Have your brother go to Windows->Downloaded program files, then Right-click on any entry with dial or dialer in the name and uninstall(remove) them. Actually he can remove all of them since if they are needed at a site, he'll be asked to reinstall them when the site is next visited.
Unplugging his modem while the computer is running will stop the dialer from connecting.
You don't mention if he has broadband or a dial-up Internet connection. If he has broadband, after he's unplugged his modem, have him download and install (If he has dial-up, you, or a friend, can do this and burn it to a CD for him.) Ad-Aware and Spybot - Search & Destroy.
It is very important to UPDATE the reference files for BOTH of these programs before you run them the first time, then frequently thereafter to ensure the very latest in detection and removal. Click Here and Here for illustrated instructions on updating and how to use these programs.
Both Spybot Search & Deatroy and Ad-Aware will remove the most common diallers with a big plus in that they will help keep his computer clean once all infections are removed.
Keep us updated so further diagnostics can be used if the problem persists.:smileyhappy:
George
m_e_thomas
8 Posts
0
October 16th, 2004 23:00
Hey, thanks for the information. We are aware of Spybot and have used it in the past to solve problems and it worked well Oddly enough, unless another worm directed him, he doesn't visit the X rated sites as suspected but I will give him the advise just the same. :smileywink: I will post again after he has tried the suggestions but it might be a couple of days.
Thanks again.
SpotCheckBilly
932 Posts
0
October 17th, 2004 05:00
m_e_thomas,
The sad thing is, you don't have to visit X-rated sites to pick up an automatic dialer. Many times the sites will add an invisible "bug" on a site and when you visit it, it triggers a "drive-by download" that the victim is totally unaware of.
The newest versions of Spybot and Ad-Aware should take care of the problem. Once it is gone there are a couple of (also free), very small programs that will stop this sort of thing from happening in the future. They are SpywareBlaster, and IE-SPYAD.
SpywareBlaster blocks bad ActiveX and malevolent cookies. IE-SPYAD puts over 4000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
Both programs you run once, then just update frequently. :smileyhappy:
George
PS There are some other diagnostic tools we can use if for some reason Spybot and Ad-Aware don't remove the problem. G
Message Edited by SpotCheckBilly on 10-16-2004 11:52 PM
m_e_thomas
8 Posts
0
October 17th, 2004 18:00
Hey, thanks for that piece of info. I think I recall another person telling me about X rated pop-ups and I know they never visited those sites. You would think some people have too much time on their hands if they enjoy sitting around figuring out ways to cause people problems.
I will be talking to my brother in the next couple of days and will post a follow up regarding his status. I really appreciate the help I have received with his issue.
Thanks again.
SpotCheckBilly
932 Posts
0
October 18th, 2004 06:00
Yes, too much time. Not to mention greed. The people creating the code causing those popups get paid quite well for their handiwork. Often additionally, a pay-per-hit, commission as well. With the money generated by the auto-dialers, you can imagine how luctative the whole thing could be if even a fraction of the popups result in a hit on the target site.
This is also why the authors of this, and other types of malware, keep making it more difficult and remove their garbage.
Check out this article: So how did I get infected in the first place? :smileyhappy:
George
m_e_thomas
8 Posts
0
October 18th, 2004 09:00
More great information. I appreciate the concern and advice from these posts.
It looks like I will be the one doing the repair for my brother so it may be a week or more before I report back on how things go (we live about 100 miles apart). He is a little uneasy about trying some of these things because he doesn't understand some of the terminology. I am no guru but I am familiar with the suggestions and know enough to understand what is being said.
Again my thanks for the help and I will update the progress after I get the chance to help my brother out.
m_e_thomas
8 Posts
0
October 30th, 2004 01:00