<?xml version="1.0" encoding="ISO-8859-1"?>
<!-- generator="HardwareAnalysis.Com" -->
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="">
        <title>Hardware Analysis - Trojan Horse Dialer</title>
        <description>Hardware Analysis Community Forums</description>
        <link>http://www.hardwareanalysis.com/content/topic/12857/</link>
        <image rdf:resource="/images/halogo.gif" />
       <dc:date>2009-11-07T16:57:05-05:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173646"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173622"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173614"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#119306"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#119297"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115728"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115636"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115634"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115416"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115414"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115402"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115398"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115393"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115392"/>
                <rdf:li rdf:resource="http://www.hardwareanalysis.com/content/topic/12857/?o=40#106240"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="/images/halogo.gif">
        <title>Hardware Analysis</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/</link>
        <url>/images/halogo.gif</url>
    </image>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173646">
        <dc:format>text/html</dc:format>
        <dc:date>2004-08-21T07:50:30-05:00</dc:date>
        <dc:creator>Mike Kelly</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#173646</link>
        <description>All I can say is thank you very much for your help. The safe mode worked fine and the virus is out of my computer thank you for teaching a comp illiterate how to remove those things. And I have to give you guys credit you really know your stuff. Thanks again.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173622">
        <dc:format>text/html</dc:format>
        <dc:date>2004-08-21T04:26:49-05:00</dc:date>
        <dc:creator>Bastard Powered</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#173622</link>
        <description>Try starting in Safe mode. Then find the dll file and delete it. &lt;br /&gt;
&lt;br /&gt;
If that does not work, try ending the process (ctrl/alt/del) and then deleting as many of the files as possible - you probably will not be able to delete the dll file or the folder that it is in, because it is in use. But, you should be able to rename the 6FC7PE7M folder. Once you rename the folder, reboot. &lt;br /&gt;
&lt;br /&gt;
Upon rebooting, the process that was using the IberoDialerHTML.dll file should not be able to locate it, which means that it will not be in use by any process. This should allow you to delete the file and/or folder the folder that contains the file.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#173614">
        <dc:format>text/html</dc:format>
        <dc:date>2004-08-21T04:12:08-05:00</dc:date>
        <dc:creator>Mike Kelly</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#173614</link>
        <description>My Avg 6.0 keeps detecting the virus Trojan Dialer.9.D...  it is in C:\Documents and settings\owner\local settings\temporary internet files\content.E5\6FC7PE7M\IberoDialerHTML[1].cab\IberoDialerHTML.dll.&lt;br /&gt;
(sorry for the long string)&lt;br /&gt;
 I have run AVG 6.0 (fully updated) over and over again and it says the file is infected and embedded. I have done the whole turning off of the system restore and re-scanning but my avg will not rmove it. I also tried trojan scan. Also my AVG does read the virus. then after it is done running the scan it has the report which reads 0 infected files and 0 files healed . does anyone have any clue on how i can get rid of this damned thing without having to reformat?&lt;br /&gt;
</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#119306">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-29T21:38:01-05:00</dc:date>
        <dc:creator>angryhippy</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#119306</link>
        <description>Hi Emma. Run the AVG again. Then go to start/right click my computer/properties/system restore tab/ Check the box that says turn off system restore. You need to clean out the files because the virus installs a copy there and can come back later if you do a system restore. Run AVG again (make sure you are updated, the site is working real slow so be patient). If you get a no viruses detected then you can go back and uncheck the sys restore box. It will automatically create a new restore point. Until you purge those files you will keep getting the virus alert from AVG. Post back with results or questions/problems.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#119297">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-29T21:21:01-05:00</dc:date>
        <dc:creator>Emma Rocker</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#119297</link>
        <description>Help me please!!!  I've got the same virus that everyone else seems to have - Trojan Horse Dialer - and I'm having problems getting rid of it.  I use AVG but it says I can't remove the file that the virus is on.  I've tried the trojanscan, various other anti-virus software and the system restore but nothing seems to be working.  Can anyone tell me anything else I can try - in simple language?!&lt;br /&gt;
&lt;br /&gt;
Thanks very much.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115728">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-18T18:39:22-05:00</dc:date>
        <dc:creator>angryhippy</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115728</link>
        <description>Go into the device manager and see what kind of sound you have Via or Realtek AC97 or something. Then go to the site and download the drivers again. Actually you can do it from control panel. Click on sounds and audio devices and see what it says the sound is on the volume tab.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115636">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-18T11:33:22-05:00</dc:date>
        <dc:creator>G N</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115636</link>
        <description>Oh...1 more thing...the sound problem is not that I don't get it all the time...it keeps muting it off and on...I realize I have no sound and when I investigate it says muted and I didn't mute it...go figure????????</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115634">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-18T11:29:13-05:00</dc:date>
        <dc:creator>G N</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115634</link>
        <description>Thanks for all your info...and I am laughing over the porn thing...you got me...lol&lt;br /&gt;
&lt;br /&gt;
I will let you know how it turns out...Thanks again guys!&lt;br /&gt;
&lt;br /&gt;
G</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115416">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T21:27:39-05:00</dc:date>
        <dc:creator>Bastard Powered</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115416</link>
        <description>Um - you probably just have to go to your control panel and then sounds and make the volume icon visible in the task bar. That is usually the culprit of missing sounds.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115414">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T21:24:54-05:00</dc:date>
        <dc:creator>angryhippy</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115414</link>
        <description>&lt;a class=&quot;ext&quot; href=&quot;/action/r/http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDocument&amp;amp;src=sec_doc_nam&quot; target=&quot;_blank&quot;&gt;http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/20010...ec_doc_nam&lt;/a&gt;&lt;br /&gt;
&lt;br /&gt;
Go there for instructions on turning off system restore. Spybot Search and Destroy should clean this. It's a varient of XXX Toolbar. Been checkin out some porn?&amp;lt;g&amp;gt; If it doesn't then you have to do the following&lt;br /&gt;
&lt;br /&gt;
Istbar is and adware component, that will acts as a homepage and search hijacker, and will popup porn etc. &lt;br /&gt;
Removal:&lt;br /&gt;
You first have to stop &amp;quot;ISTsvc.exe&amp;quot; process, then delete the folder &amp;quot;ISTsvc&amp;quot; in C:\Program Files.&lt;br /&gt;
Then you remove the value &amp;quot;IST Service&amp;quot; = &amp;quot;C:\Program Files\ISTsvc\ISTsvc.exe&amp;quot; from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and also the key ISTsvc from HKEY_LOCAL_MACHINE\Software.&lt;br /&gt;
&lt;br /&gt;
What kind of sound do you have. You can usually find the drivers on their web site.</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115402">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T20:32:38-05:00</dc:date>
        <dc:creator>G N</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115402</link>
        <description>Also...lol...when quarantining and deleting I have managed to delete my sound totally off my computer...how do I get sound back?.....Thanks for all the info!</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115398">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T20:11:17-05:00</dc:date>
        <dc:creator>Bastard Powered</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115398</link>
        <description>Try shutting off the system restore. If necessary use the ctrl/alt/delete and terminate the process. Frankly, in WIN ME I think you should completely shut it down because in ME it really sucks.&lt;br /&gt;
&lt;br /&gt;
After you shut down the sys restore, reboot and then delete your restore points. Then run a virus scan and a spybot check. Your system should be clean at that point.&lt;br /&gt;
&lt;br /&gt;
Well, theoretichally, anyhow.&lt;br /&gt;
&lt;br /&gt;
</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115393">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T20:03:57-05:00</dc:date>
        <dc:creator>G N</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115393</link>
        <description>also......I have AVG and it didnt catch it.......and I use Windows ME......thanks in advance!</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#115392">
        <dc:format>text/html</dc:format>
        <dc:date>2004-03-17T19:59:44-05:00</dc:date>
        <dc:creator>G N</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#115392</link>
        <description>I have this virus........C:\-RESTORE\TEMP\A0064266.CPY VIRUS NAME-downloader.lstbar.W&lt;br /&gt;
&lt;br /&gt;
I have tried the restore and when I go to restore on my C drive and hit properties and click hidden it says my access is denied.....all of the problems here are exactly what i am experiencing but somehow it won't let me in my own attributes.....I don't know what else to do....it is taking my memory while I am on the computer.....can anyone help me?</description>
    </item>
    <item rdf:about="http://www.hardwareanalysis.com/content/topic/12857/?o=40#106240">
        <dc:format>text/html</dc:format>
        <dc:date>2004-02-21T19:50:50-05:00</dc:date>
        <dc:creator>Bastard Powered</dc:creator>
        <title>Re: Trojan Horse Dialer</title>
        <link>http://www.hardwareanalysis.com/content/topic/12857/?o=40#106240</link>
        <description>That's pretty standard. Definately, set your AV proggie to scan ALL files. Otherwise, you are set up for pain.&lt;br /&gt;
&lt;br /&gt;
Yeah, that is from personal experience from early on in my computer experiences. Nothing like the hard way for learning.&lt;br /&gt;
&lt;br /&gt;
By the way, if my fix for the dialer program helped anyone, I would sure like to know. </description>
    </item>
</rdf:RDF>
