Virus creating dial up connection

[501]

This issue may have already been cover a couple of weeks ago, but I couldn't find anything about it. So here it goes.

I have a machine that a dial up connection is being created with the dial-up # as 1. It dials up to the internet running up the phone bill making long distance calls. I can't install Norton 2004 because the browser must be updated to 6.1 and it won't allow it to update. I have searched the registry to try and find it in the RUN, RUN ONCE keys with no luck. Has any one else come across this and may have some pointers.

Would like to fix this with out re-enstalling the O/S.

 

[ReddLefty]

Maybe it's this one:

http://securityresponse.symantec.com/avcenter/venc/data/dialer.coder.html

There is info on how to check and remove it if it exists.



"In space, nobody can hear you click..."

 

[Xemus]

First, there are three keys that hold the majority of the programs that run at startup.

HKCurrentUser/software/microsoft/windows/current version/run

HKLocalMachine/software/microsfot/windows/current version/run

and

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

http://www.closedsocket.com

 

[GMAN33]

501

Just ran into this yesterday on a friend's PC. I d/l and installed Adaware, Spybot-Search and Destroy and Spysweeper and the combination of these, solved the issue.
What OS are you running? Do you have AV installed? Definitions up to date? Are the services stopped/disabled that don't need to be running? Just a few questions that need to be addressed

Good luck