-=> Quoting David Kirschbaum to All <=-
DK> I heard a story, related second hand but heard on television
DK> recently, that there's a new trojan program being downloaded from
DK> Internet web sites. If I can remember this correctly, it's supposed
DK> to be a small .EXE program, and is usually found on pornographic web
DK> sites. The distributor explains it's supposed to be used to display
DK> pornographic images or some such.
DK> However .. when you download and execute it, it supposedly reconnects
DK> you with a _very_ expensive overseas number (like in Slobovia or some
DK> such place), a 900- equivalent that costs you many dollars a minute ..
DK> _and_ you can't tell your modem disconnected from your Internet
DK> service and redialed for some reason .. _and_ it supposedly leaves your
DK> modem still connected to this _very_ expensive number even if you shut
DK> off your computer (or maybe just your Internet connect software).
DK> _And_ your phone company won't listen to your whining because it was
DK> _your_ system that did the dialing.
DK> Anyone hear anything else about this? Right now I consider it rumor
DK> (at best).
Sounds like the GOOD TIMES virus got a face lift!
How the heck would your machine dial out without you knowing it was doing so?
You won't disconnect from your ISP without some kind of message (either a
disconnect, or an error - most likely an error message).
Even if this so-called virus had some way of turning off your speaker sound,
by loading a different initialization string, persons with external modems
who were used to the way the lights operated would certainly notice the
difference.
And leaves your modem connected when you shut the computer off? I don't
think so. Try this some time. Call a BBS or your ISP, shut your computer
off, and then turn it back on...see if it's still connected! It won't be!
I might be willing to believe a trojan that sets it's own WINSOCK.DLL in
Windows, causing you to dial it, instead of your ISP on your next dial out,
but that'd be about it.
... "I tried phone sex once, but the holes were too small."
___ Blue Wave/386 v2.30
--- TriToss (tm) Professional 10.0 - (Unregistered)
---------------
* Origin: WILD TURKEY BBS * Doors, Doors, Doors (1:133/5012.0)
|