1on1 dialer touble

[Richard Palmer]

I somehow managed to get infected - if that's the right word - by a
dialer that displayed a shortcut on the desktop and in the tray,
labelled "1on1". Ironically, although this is a porn dialer, I wasn't
anywhere near a porn site at the time. But that's by the by.

Three problems, or questions.

1) Although I think I've removed all the traces of it, is there a
definitive list that I can check off, to make sure it's all gone?

2) The little bugger disabled my modem sound. It never has made a
sound through my speakers, it just screeched inside the PC tower, but
now it won't even do that. Obviously this is deliberate, to stop folks
know the modem is dialling out, but how can I restore it? The obvious
control panel solutions don't appear to have any effect.

3) I was lucky, in that it "only" made £25 worth of calls. That's
about $40. I rang British Telecom who have agreed to send me an
interim statement so I can identify what is what, but there's no
guarantee they'll refund me. It seems to me that somebody must be
responsible for licensing a phone line to a criminal organisation, so
they should give me my money back. Who is that likely to be? Has
anyone else ever been successful in getting a refund?

Thanks,

Richard

 

[Pepperoni]

Protest the charges, of course. I had my line set for no long distance and
no third party calls. three months later they slammed my service to ATT
and billed me for calls 3 months previous. I pulled the plug and went to
cable. The calls were billed from Vanuatu, I believe an island nation with
no natural resources, but its own WWW domain......weird stuff. ATT sucks.
**********
Officials Say Mob Stole $200 Million Using Phone Bills
By WILLIAM K. RASHBAUM

Published: February 11, 2004


orget gambling, loan-sharking and labor racketeering. New York organized
crime figures bilked millions of unsuspecting consumers out of more than
$200 million over five years by piggybacking bogus charges on their
telephone bills, federal authorities said yesterday.

The scheme, involving a network of companies stretching from Midtown
Manhattan to Overland Park, Kan., marked what federal authorities believe
was the first time organized crime figures have been charged with using the
billing fraud known as "cramming" to fill mob coffers.
The nationwide scheme was sophisticated, officials said, but the idea was
simple: Callers responding to advertisements for free samples of services
like psychic phone lines, telephone dating services and adult chat lines
were unknowingly charged up to $40 a month on their phone bills for services
they never requested and never used.

It worked because many telephone-related services are now paid through local
phone companies' monthly bills, with the companies passing on the payments
to the service providers. The organized crime figures used a company that
consolidated billings for service providers, allowing them to bill through
local phone companies and collect their fees, fees with innocent-sounding
titles like "voice mail services" hidden deep within the phone bills,
unnoticed by all but the most dogged consumer. Frauds involving cramming -
the common term for larding a telephone bill with unauthorized charges -
have been around for years, but the mob's scheme was particularly audacious,
the authorities said.

Two accused Gambino crime family members and several associates were charged
in the case yesterday with racketeering, racketeering conspiracy, money
laundering and other charges, according federal prosecutors and F.B.I.
officials.
MORE........................
http://www.nytimes.com/2004/02/11/nyregion/11MOB.html
(FREE registration required)
*********************
One of the experts will probably advise you better in the morning. My
first reaction would probably be to wipe the drive (overwrite the entire
drive) and reinstall. Zone Alarm would have probably caught that critter.

Good luck, bud.

Pepperoni

 

[Geese_Hunter]

I somehow managed to get infected - if that's the right word - by a
dialer that displayed a shortcut on the desktop and in the tray,
labelled "1on1". Ironically, although this is a porn dialer, I wasn't
anywhere near a porn site at the time. But that's by the by.

Three problems, or questions.

1) Although I think I've removed all the traces of it, is there a
definitive list that I can check off, to make sure it's all gone?

2) The little bugger disabled my modem sound. It never has made a
sound through my speakers, it just screeched inside the PC tower, but
now it won't even do that. Obviously this is deliberate, to stop folks
know the modem is dialling out, but how can I restore it? The obvious
control panel solutions don't appear to have any effect.

3) I was lucky, in that it "only" made £25 worth of calls. That's
about $40. I rang British Telecom who have agreed to send me an
interim statement so I can identify what is what, but there's no
guarantee they'll refund me. It seems to me that somebody must be
responsible for licensing a phone line to a criminal organisation, so
they should give me my money back. Who is that likely to be? Has
anyone else ever been successful in getting a refund?

Thanks,

Richard

install Ad-Aware from Lavasoft http://www.lavasoftusa.com/software/adaware/
removes spyware

install hijack this this is from a school & will only give you a log file,
which is ok, do a google & find 1 you can install & customize
http://www.siena.edu/antivirus/Spyware/hijackthis.htm this will tell you
what's still in your registry. tutorials on how & wat to delete are at.
http://hjt.wizardsofwebsites.com/

Get avg anti-virus from free 6.0 http://www.grisoft.com/us/us_index.php to
remove any virus's or trojans
& the last spyware removal to get is
http://www.safer-networking.org/index.php?page=home. Update all & run. on
the spyware s&d make sue you run the immunizer as well.

Also, look at getting a firewall to prevent your browser getting hijacked I
like Zone alarm

 

[Geese_Hunter]

I somehow managed to get infected - if that's the right word - by a

<Snip>

I also forgot a registry cleaner program to keep it out of your system when
you reboot. http://www.sharewarejunkies.com/00zwd10/easycleaner.htm

I'd bet if you run all these & then re-install your modem driver the
sound'll come back

 

[Richard Palmer]

install Ad-Aware from Lavasoft http://www.lavasoftusa.com/software/adaware/
removes spyware

install hijack this this is from a school & will only give you a log file,
which is ok, do a google & find 1 you can install & customize
http://www.siena.edu/antivirus/Spyware/hijackthis.htm this will tell you
what's still in your registry. tutorials on how & wat to delete are at.
http://hjt.wizardsofwebsites.com/

Get avg anti-virus from free 6.0 http://www.grisoft.com/us/us_index.php to
remove any virus's or trojans
& the last spyware removal to get is
http://www.safer-networking.org/index.php?page=home. Update all & run. on
the spyware s&d make sue you run the immunizer as well.

Also, look at getting a firewall to prevent your browser getting hijacked I
like Zone alarm

Thanks, there's some very useful info there. I think that not having a
firewall was what did for me in the end. I used to run Zone Alarm, but
found that the "True Vector" component, whatever that was, was causing
Windows XP to crash. This was confirmed by reading messages on various
forums.

Any alternative suggestions? The one bundled with XP seems to be
pretty useless.

Richard

 

[Richard Palmer]

I'd bet if you run all these & then re-install your modem driver the
sound'll come back

I don't know if anybody else has had this problem, but this afternoon
I found the solution.

Apparently the dialler altered a setting. In Windows XP it was tucked
away in Control panel in Phone & Modems. Go to
Modems/Properties/Advanced and all you do is type in (or change) M1
where it says "Extra Initialization Commands".

It restored the sound immediately.

Richard

 

[Turan Fettahoglu]

Thanks, there's some very useful info there. I think that not having a

firewall was what did for me in the end. I used to run Zone Alarm, but
found that the "True Vector" component, whatever that was, was causing
Windows XP to crash. This was confirmed by reading messages on various
forums.

Any alternative suggestions? The one bundled with XP seems to be
pretty useless.

You are right about the XP firewall. It seems you tried an older ZoneAlarm
version. My version 4.5.538 runs smoothly under XP. On the other hand:
rumour says that ZoneAlarm can be tricked out rather easily by a hacker.

For the removal of dialers you can also try SpyBot Search & Destroy. It
found out some phone-home spyware that Ad-Aware missed.

Oh, and contest the dialer bill. The dialer tricksters want your money. And
so far they haven't any.

Good luck
Turan

 

[Geese_Hunter]

Thanks, there's some very useful info there. I think that not having a
firewall was what did for me in the end. I used to run Zone Alarm, but
found that the "True Vector" component, whatever that was, was causing
Windows XP to crash. This was confirmed by reading messages on various
forums.

Any alternative suggestions? The one bundled with XP seems to be
pretty useless.

Richard

XP's "firewall" is not really a firewall.

I've used Zone Alarm 4.0 & never have had any problems, It's caught
everything for me so I haven't looked further. Your never going to be able
to stop that 1 hacker that wants in your system bad enough.

 

[Sherlock35]

Richard Palmer a écrit :

.....

Any alternative suggestions? The one bundled with XP seems to be
pretty useless.

I'm using Kerio Personal Firewall , freeware.

It's fine. Last version is easier to setup.

yours sincerelly,

Joel

 

[Richard Palmer]

Richard Palmer a écrit :


I'm using Kerio Personal Firewall , freeware.

It's fine. Last version is easier to setup.

Thanks, I'll do a search and see what I can find.

Richard

 

[FromTheRafters]

XP's "firewall" is not really a firewall.

Neither is Zone Alarm.

 

[James Egan]

Thanks, I'll do a search and see what I can find.

Incidentally, this particular bit of software has been the cause of
some (problem) postings regarding unsolicited dialup.

Unless unchecked it will try to resolve local addresses by dns which
may well involve a dial out.


Jim.