egafd.com

please can anyone help - the most aggresive dialer I have ever seen is hijacking my pc. I know all the dialer tricks that fool you into installing it, but this one appears from nowhere, disconnects my ntl dial up, and the only way to stop it is to pull the plug. It even happens when I am not looking at porn. I've tried anti virus, spybot, ad-aware, checked the registry, but I cannot find anything. The dialer continues to self install itself roughly once every 2 days. I managed to get some details of it - it's called xadult, connects to xxxserver and dials the number 5551212. I would be very grateful if anyone has some advice. I must be missing something in my system, maybe something in the windows folder or registry. I can't download anything for fear of this dialer appearing - any ideas?

cheers

I forgot to add - I manually uninstall the dialer under my network connections and remove all visible trace of it, but still it reappears.

Have you tried searching for it through find-files/folders

under........IE Content

Last place I found a dialer

Somewhere like might be of help



cheers
B....OZ

XXXDialer - Adult_Chat dialer Creates a dialup connection in the Dial-Up Network folder set to dial 5551212 which appears to be a local number but leads to a Solomon Island number 011 67706018.

Follow these steps to remove Adult_Chat dialer from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

adult_chat.exe

Remove Files:

Remove these files (if present) with Windows Explorer:

adult_chat.exe
adult_chat.lnk
bzhdr[1].js
dialer.inf
myinitialsetup1.0.0.3.inf
xxxdial.dun

Forgot to mention 2 useful programs in relation to the above forum

Hijack This... prints out a log of all the spots where nasties are likely to be located

CW Shredder....detects & removes better than all other programs so I've been reading

Both can be downloaded from

Half way down the page by Phoenix 22 10/10/2003 under Removal instructions..2 zips files..also has support forum link if you run into installation problems

Might be useful after you've done what European suggested just to make sure it has all been removed if as you say you can't download at present without starting the dialer

cheers
B....OZ

As my good friend Buttsie points out, CW Shredder is a useful tool for detecting re-directs, home page changes, diallers etc, I may have a small update to the Locker soon, given all this crap thats floating about at the moment, the 'Huns Yellow Pages' has been hi-jacked a couple of times with virus, these re direct ie to a page of 'their' choice, he has sorted it I think.....

thanks for the help everybody, let's hope the bastard's gone for good.

If you really want to know that you are as safe as can be test your security at with the program shields up

A must see site for anybody using Windows IMHO

There are plenty of other vulnerabilities an solutions explained in laymens terms...brilliant site

If your surfing without a firewall consider getting one like the free version of the zone alarm from

I haven't had one dialer get aboard since and I'm surfing with the ancient
IE5 which has more security holes than a swiss cheese

cheers
B....OZ

out of curiosity, if you get a massive phone bill caused by a conning dialer, do ntl force you to pay it? and does broadband (ntl cable) remove the threat of dialers, as the phone line is not used. thanks again.