The properties of the DialUp connection keep changing to a strange user
name, and some far away number. I've been deleting all connections and
created new ones, but within a few seconds, the properties are changed
again. Also the computer attempts to dial in at random. We've had high
telephone bills, and although we get the money refunded from the
telecommunications company, I would like to remove the dialler from the
PC. I've been digging in the registry to see if the user name and phone
number are there, but the only place where I've found the user name was
in windows' user.dat files. I edited these using Wordpad, but that
screwed up user profiles, so I had to use the old user.dat files again.
I've scanned the PC for viruses and spyware, using the latest
information, but I couldn't find anything.
Could someone tell me how to find this dialler on my system so that I
can remove it?
Regards,
--
Rouke
Don Phillipson - 31 Aug 2005 13:30 GMT
> The properties of the DialUp connection keep changing to a strange user
> name, and some far away number. I've been deleting all connections and
[quoted text clipped - 11 lines]
> Could someone tell me how to find this dialler on my system so that I
> can remove it?
Alien software that thus controls your PC is usually
called hijackware. There are software cures.
To see what software is currently loaded and active key
(simultaneously) Ctl Alt Del
You will see a list of active software. Write down the whole
list and identify its components in turn.
You can disable some of these via
/ start / run / MSCONFIG.EXE
but some software runs independently of this utility.
To see all software currently loaded,
/ start / run / MSINFO32.EXE
/ Software Environment will list everything currently loaded.
When you identify anything you believe to be hijackware
1. Rename it so it cannot run, e.g. rename XYZ.EXE as
XYZ.BAD and reboot. Your PC may still attempt to call
XYZ but iit cannot run (and the error message may
assist otherwise in cleaning the system.)
1b. In order to avoid Windows controls, you may need
to shell or reboot to DOS in order to rename these items.
2. Follow a systematic program for identifiication and
removal of hijackware and other malware.

Signature
Don Phillipson
Carlsbad Springs
(Ottawa, Canada)
PattyL - 01 Sep 2005 12:24 GMT
This site will give you lots more information on parasites, viruses, etc as
well as links to downloads and some online checkers. You might start with
the Online Parasite Scanner.
http://www.aumha.org/secure.htm
PattyL
> The properties of the DialUp connection keep changing to a strange user
> name, and some far away number. I've been deleting all connections and
[quoted text clipped - 16 lines]
> --
> Rouke