TIP: Click on subject to list as thread! ANSI
echo: virus_info
to: DAVID KIRSCHBAUM
from: MIKE HUDSON
date: 1997-02-26 02:09:00
subject: Internet Dialing Trojan

-=> Quoting David Kirschbaum to All <=-
 
 DK> I heard a story, related second hand but heard on television
 DK> recently, that  there's a new trojan program being downloaded from
 DK> Internet web sites.  If I  can remember this correctly, it's supposed
 DK> to be a small .EXE program, and is  usually found on pornographic web
 DK> sites.  The distributor explains it's  supposed to be used to display
 DK> pornographic images or some such. 
 DK> However .. when you download and execute it, it supposedly reconnects
 DK> you with  a _very_ expensive overseas number (like in Slobovia or some
 DK> such place), a  900- equivalent that costs you many dollars a minute ..
 DK> _and_ you can't tell  your modem disconnected from your Internet
 DK> service and redialed for some reason .. _and_ it supposedly leaves your
 DK> modem still connected to this _very_  expensive number even if you shut
 DK> off your computer (or maybe just your  Internet connect software). 
 DK> _And_ your phone company won't listen to your  whining because it was
 DK> _your_ system that did the dialing. 
 DK> Anyone hear anything else about this?  Right now I consider it rumor
 DK> (at best). 
 
Sounds like the GOOD TIMES virus got a face lift!
 
How the heck would your machine dial out without you knowing it was doing so?
You won't disconnect from your ISP without some kind of message (either a
disconnect, or an error - most likely an error message).
 
Even if this so-called virus had some way of turning off your speaker sound,
by loading a different initialization string, persons with external modems
who were used to the way the lights operated would certainly notice the
difference.
 
And leaves your modem connected when you shut the computer off?  I don't
think so.  Try this some time.  Call a BBS or your ISP, shut your computer
off, and then turn it back on...see if it's still connected!  It won't be!
 
I might be willing to believe a trojan that sets it's own WINSOCK.DLL in
Windows, causing you to dial it, instead of your ISP on your next dial out,
but that'd be about it.
 
... "I tried phone sex once, but the holes were too small."
___ Blue Wave/386 v2.30
--- TriToss (tm) Professional 10.0 - (Unregistered)
---------------
* Origin: WILD TURKEY BBS * Doors, Doors, Doors (1:133/5012.0)

SOURCE: echomail via exec-pc

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.