Nunci
|
Description:
|
Dialer
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Wednesday, October 22, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Dialers (dialing software) are software packages that connect your machine directly to the Internet or an on-line service via a modem hooked up to a phone jack.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
ELIMINAR SPYWARE »
Geographical Distribution of Threat "Nunci"
Threat Info
View All
Detected Items
- Detected Files:
%SYSDIR%\Winx\SRS9.EXE
MD5: D3CD201C8133765F82A2846ABCE7F89B Size:55152
- Detected Files with variable Filenames:
Detecting items list:
- Files by Name
%sysdir%\Winx\SYS.EXE
%sysdir%\Winx\SRS9.EXE
%DESKTOP%\FOTO - ANNUNCI - FILM - VIDEOCHAT.lnk
%START_PROGRAMS%\FOTO - ANNUNCI - FILM - VIDEOCHAT.lnk
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\FOTO - ANNUNCI - FILM - VIDEOCHAT.lnk
- Files by CLSID or Name
CLSID=AE71A324-1EF2-40BC-ADDC-30FD9CF95F87
- Registry Keys
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{54F7FD6E-E782-4F9F-8FF0-677090048729}
HKCU\Software\Freeware\{AC5ACED1-97DB-4A2A-81A9-ACFC8ECA1085}
HKCU\Software\Freeware\{FFB51760-344E-4FFB-BFFF-4B18C7AC1D63}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FFB51760-344E-4FFB-BFFF-4B18C7AC1D63}
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=Connector
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=SNSS.EXE
«
Go to Software Database
