TR/Dialer.22352.B - Trojan

See also

Summary

Full description

Statistics

Virus:	TR/Dialer.22352.B
Date discovered:	11/04/2008
Type:	Trojan
Subtype:	Dialer
In the wild:	No
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low
Static file:	Yes
File size:	22.352 Bytes
MD5 checksum:	789ead4152cb0Eedca67ca5a23ec9147
IVDF version:	7.00.03.157 - Fri, 11 Apr 2008 16:47 (GMT+1)

General Method of propagation:
   • No own spreading routine

Aliases:
   • Symantec: Dialer.Trojan
   • Mcafee: potentially unwanted program Dialer-321
   • Sophos: Mal/Dial-V
   • Grisoft: Downloader.Delf.12.AE
   • Bitdefender: Application.Dialer.INM

Platforms / OS:
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003

Side effects:
   • Registry modification

Right after execution the following information is displayed:

Registry The following registry key is changed:

Internet Explorer's start page:
– [HKCU\Software\Microsoft\Internet Explorer\Main]
   Old value:
   • "Start Page"="about:blank"
   New value:
   • "Start Page"="http://www.add-hhh.info/"

File details Programming language:
The malware program was written in Delphi.

Runtime packer:
In order to aggravate detection and reduce size of the file it is packed with the following runtime packer:
• UPX

See a brief description here.

Description inserted by Thomas Wegele on Thu, 15 May 2008 10:25 (GMT+1)
Description updated by Thomas Wegele on Thu, 15 May 2008 10:34 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back