Forum Home
PC World Chat
 
Thread ID: 57276 2005-04-28 07:25:00 Trojon Dailer causing huge $$$ on phone bills, what do you guys think about this? CCF (6760) PC World Chat
Post ID Timestamp Content User
349934 2005-04-29 11:40:00 Press F1 needs one of these:

www.gpforums.co.nz


PF1 Security Faq's (pressf1.pcworld.co.nz) & PF! Basic Maintenance Faq (pressf1.pcworld.co.nz 5). HTH

Maybe a link to the FAQ's could be stickied as well as the link in the bar near the top of every page, which becomes a bit invisible after a while?
Murray P (44)
349935 2005-04-29 21:48:00 Just to quibble here for a moment. If a dialer does try its thing, wouldn't this be the sequence?

The dialer (an executable) disconnects your current connection. Depending on your configuration, you hear a beep as it disconnetcs, a red x appears on the double-monitor icon in the systray. You could be alerted by now. Next the the dilaer tries to make a new connection. Does this mean the connection box comes up, and with different details than what you put in yoursel? Second alert. And......if the dilaer is an exe which it seems it must be to me, and this was tweak'e's point as I understand, then it's a program and therefore a new program is trying to access the internet so a firewall should pick it up?

If there is to be a FAQ about this it would be good to takew this into account as this is and hones noob's thought on the matter.

Cheers. Happy Saturday Morning.
mark c (247)
349936 2005-04-30 10:28:00 Time to climb into this discussion as maybe from my side there may a couple of other causes.....?

What time of the day or night was the call made?
Has Telecom identified it as being a common trojan number, ie lots of calls as a premium rate service?

Other thoughts could be someone discovering a jackpoint in their house or flat down the road, where your line may have been previously connected and using it to make a call or two....

Other causes could be a older cordless phone if you have such an animal in your house and a near neighbour also has the same, and it has grabbed your line instead of theirs.

Also persons accessing the Telecom network at the roadside pillar or cabinet and just clipping across your line and making a call or two....

Fraud is a big issue for Telecom but to just leap in and say it's a dialler, ( unless of course they are getting the same number called from all over the country )

Even a faulty line can be a cause, or if the cable was damaged and rejoined and you had the wrong number for a day or so and someone else had yours....

Lots of other possibilities and as a faultman I consider them all everytime I go to a job and not just leap to the flavour of the month.
EX-WESTY (221)
349937 2005-04-30 10:50:00 Time to climb into this discussion as maybe from my side there may a couple of other causes.....?

What time of the day or night was the call made?
Has Telecom identified it as being a common trojan number, ie lots of calls as a premium rate service?

Other thoughts could be someone discovering a jackpoint in their house or flat down the road, where your line may have been previously connected and using it to make a call or two....

Other causes could be a older cordless phone if you have such an animal in your house and a near neighbour also has the same, and it has grabbed your line instead of theirs.

Also persons accessing the Telecom network at the roadside pillar or cabinet and just clipping across your line and making a call or two....

Fraud is a big issue for Telecom but to just leap in and say it's a dialler, ( unless of course they are getting the same number called from all over the country )

Even a faulty line can be a cause, or if the cable was damaged and rejoined and you had the wrong number for a day or so and someone else had yours....

Lots of other possibilities and as a faultman I consider them all everytime I go to a job and not just leap to the flavour of the month.


:groan:
Safari (3993)
349938 2005-04-30 12:39:00 :groan:
I second that.
ninja (1671)
349939 2005-04-30 22:14:00 I drove by an pen green telecom exchange box around either Auckland Anniversary weekend, or Waitangi Weekend, after pressing 1 2 etc for 5 minutes i finally got thru to someone to tell them it was open, 2 days later it was finally closed up. Just think what someone with knowledge could have done to that areas phone calls :) MartynC (5610)
349940 2005-10-30 20:43:00 Okay here's my input that might help you or not but here goes .
Firewalls wont do you good deu to they don't detect most dailers and the reason is that they change our dailup number most of the time take it from me I just had one changing my dail up number but only deu to a powerfailure because I have config my pc to never dail a connection automaticly and to never disconect either,and just to make sure I added to never redail a conection. Now to point out that firewalls only detect port activity and not and I say agian not a program that changes our dailing number you know the one you put in when you added a dailup connection ,a firewall will only stop the program accsesing the web if it is in the range of a .exe and not a dailup
connection so if you did not specified that your browsers and all programs must ask before accessing the net then it will let it pass,like a browser that you specified to access the net too have that damned popup of a firewall a minuim to appear, it will pass unnotice to the firewall. I use System Suite 5 and it passed SS5 with no detection , now then lets check if Winpatrol detected it ,no it did not only that it changed my home page so there goes scoty with his sniffing abilities with his tail between his legs, Spybot did stop a couple to but not this one so that was not good for a spy aswell and I wont't hire spybot fulltime aswell so he will have to go a bit hungry this month, now you'll start to say get to the point but there is more please bear with me ,now AVG 7 aarghh please its a virus scanner and no virus scanner will pick up a small program that changes our dailup number ,bring me a virus scanner that pick this one up and i'll show you chicken teeth, well wich one
well wat about Spyware Blaster mmm maby I just installed it and it found 39 more spyware mmm ? why did Spybot not pick them up it was updated 60mins ago mmm .Well I'm not gona put my money on Spyware Blaster yet even though it detects dailers, to give you more background is when you have deul boot on pc some spyware puts footprints in your C drive in internet explorer and some spyware just checks your boot windows like I have XP on D drive and so IE uses some times C drive aswell mmm you did not know that did ya well I had a client complaint that one of his systems keep going to a bad site and the had tried all progs and it was still going their , after 2 day I found it in the C drive in IE temp folder , so clean up your temp folders aswell
for good measure and theirs more there is system restore point aswell that they can ad a file I had a Virus that everytime I deleated it in the restore points folder it moved to another folder in the restore folder and they say some dailers can do that to so not much progs go look for them in the restore folders aswell ,there is more :waughh: :groan: :yuck: :badpc: to put it this way the more protection you have the better ,the less chance some thing slips by .
To point out one more thing if I may BY THE TIME YOU DOWNLOAD AN PACTH FOR YOUR SPYWARE , FIREWALLS AND VIRUS SCANNERS THEIR OUT DATED BY A FEW HUNDRED MALITIOUS WARE .
SO IT MAKES YOU THINK DOES IT NOT?
Well I hope this helped you in any way.
P.S
A Fresh Reboot solved me more problems than i can remember and saved a lot of time too ,you could say I can do it with closed eyes by now and
Thanks for your time and good hunting if you don't want to re install windows.
One more good joke ,wat does XP stands for?
eXtreme Problems.
You can take it that I like Linux more pity that only now developers is waking up to linux now and soon I can through away windows for good and play games on linux. see ya
Thundercracker (7986)
349941 2005-10-30 21:12:00 don't forget a dailer can be a legit program so AV, adaware etc won't pick it up . odds are someone let it through the firewall .

Hey Tweak . . . . Spybot S&D CAN have the scan for any one or more of it's security settings turned off . . . I get one every once-in-a-while .

That's why I go to the SETTINGS area in the ADVANCED MODE of Spybot and open the area called IGNORED PRODUCTS . While your pointer is in the large white area of that results that pop up, right click and "UNCHECK ALL" .

This will remove any checkmarks from those dialers (which SB S&D looks for and will protect against) and makes them impotent by setting .

One must be using the ADVANCED MODE of SB for this setting . Using DEFAULT MODE will not allow you to see these settings and there may be a hundred check marks that SB has been told to ignore by a virus or malware .

. . . . . . and don't forget that if you have DSL running, you don't need the dial-up modem plugged in too! It's just plain ol' dangerous to have the phone modem viable when you are on DSL .
SurferJoe46 (51)
1 2 3 4 5 6