Recent trojan uses modem to dial long distance?

I have heard of it and saw it on TechTV recently but can't remember the name of the virus. A user recently came to me and mentioned he had a $40 charge to Guyana and I told him that I was pretty sure it was a trojan

I did some brief googling and hit symantec/mcafee but couldn't find any writeup's on it. It's a little hectic right now so if someone recalls the name of this, or if it even was a trojan I'd appreciate it!

Thanks
MooliganAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LucFEMEA Server EngineerCommented:
I think it wasn't a virus or trojan, I've seen these things lot's of times and all of those were adware wich were removed easely with adaware from lavasoft => http://www.lavasoftusa.com/support/download Afterwards I had to change the ISP manually to the right number to dial in.

LucF
0
MooliganAuthor Commented:
Yeah I wasn't sure if it was virus or trojan either. I read that some of them do install software though, but usually after the user says yes to something. I already asked him to run ad-aware, I was just hoping to provide him with some sort of writeup on it.
0
LucFEMEA Server EngineerCommented:
>  but usually after the user says yes to something.
Most of the time yes, but sometimes when the user has auto install enabled for instance it doesn't ask. Also sometimes there's a pop-up out of the screen waiting for an enter to be pressed (so you don't see it, but it's there at the right of the screen most of the time, only one pixel wide)

LucF
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

tbird008Commented:
The correct term will be you dial up connection has been Hijack!!

There are lot of spy removal are that will take care of this problem.  You can also find processor that is running in Task Manager if it was hijacked.

You can run spyware removal tools to find out if any of this is in your system.  Nowaday Only running Anti-Virus Program will not safe you from attack.

Goto this liink there are and scroll down..there are lot of links will help you!
http://www.kayodeok.btinternet.co.uk/index.htm

Tbird008
0
LucFEMEA Server EngineerCommented:
tbird008, good link!
0
tbird008Commented:
Thx LucF,

We are here to provide good info : )

Tbird008
0
MooliganAuthor Commented:
Found out what I originally saw, it was a recent IE activeX exploit that allowed the connection to dial another site that charged you several $$ per minute.

0
LucFEMEA Server EngineerCommented:
Glad to help

LucF
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.