Computer Taken Over - Big 0900 Phone Bill

[digmen1]

Please help me.

My father's computer was taken over somehow and he got a big phone bill for 0900 numbers that he never rang.

I have heard that this is possible by hackers.

I have run Spybot and also removed a file in his startup configuration (called Paysomething.exe)

But I would like to know what these programs are, and how to stop them getting on to his computer again.

He does not use a firewall.

Are these easy to see up so that you can still use Kazaa Lite ?

Thanks

Digby
NZ

[delphin460]

spybot
spyware guard
spyware blaster
some type of current anti virus

and get him to ring your phone company and block all calls to 1 900 and 0055 numbers , that way it cant ring out
Note most phone companys will block these services without blocking std or local calls

also go to internet options and make sure in connections that the only connection is you isp ( internet service providers details , delete anything else )

Oh also tell him to stop surfin porn lol, and never click accept on anything unless he knows what it for lol

[james_bond_rulez]

Originally posted by digmen1@6 May 2004 - 01:02
Please help me.

My father's computer was taken over somehow and he got a big phone bill for 0900 numbers that he never rang.

I have heard that this is possible by hackers.

I have run Spybot and also removed a file in his startup configuration (called Paysomething.exe)

But I would like to know what these programs are, and how to stop them getting on to his computer again.

He does not use a firewall.

Are these easy to see up so that you can still use Kazaa Lite ?

Thanks

Digby
NZ
ur father probably visited a porn site and got a dailer...

not anybody&#39;s fault <_<

[delphin460]

Originally posted by james_bond_rulez+6 May 2004 - 10:06--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (james_bond_rulez @ 6 May 2004 - 10:06)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-digmen1@6 May 2004 - 01:02
Please help me.

My father&#39;s computer was taken over somehow and he got a big phone bill for 0900 numbers that he never rang.

I have heard that this is possible by hackers.

I have run Spybot and also removed a file in his startup configuration (called Paysomething.exe)

But I would like to know what these programs are, and how to stop them getting on to his computer again.

He does not use a firewall.

Are these easy to see up so that you can still use Kazaa Lite ?

Thanks

Digby
NZ
ur father probably visited a porn site and got a dailer...

not anybody&#39;s fault <_< [/b][/quote]
i disagree , its the persons fault that clicked yes

[Livy]

there is a new scm where the computer dials a premium rate dialer every couple of minutes. it was on watchdog, sounds like what u have.

[100%]

1.Get a firewall
2.Tell your dad or whom ever surfs porn :ph34r: - to go to the 100s of forums to get freeaxcess passswords to those sites - http://www.wt50.com/
3.Some phone companies, porn companes-just send you a bill-and expect the customer to pay cause their too emabarresed even though they havent been doing porn.
4.Ask your isp, or check your history if you still have it for evidence...this will be fun
5.Use Firefox as your browser

[gungrave]

just put a firewall up and put up a password so he cant look at porn sites :lol:

[Ariel_001]

You most likely have a Dialer (http://pestpatrol.com/PestInfo/other/00d_dialer.asp)



Dialer: Software that dials a phone number. Some dialers connect to local Internet Service Providers and are beneficial as configured. Others connect to toll numbers without user awareness or permission.



There are planty of sites/software out there that will remove/detect this kind of scum software. (A good anti-virus should be able to)

[zapjb]

What I do, I live in the states btw. I have multilayered security as mentioned. But I have NO long distance carrier&#33; I have a prepaid phone card instead. So a dialer would never work on my line. :lol:

[Filliz]

Originally posted by delphin460@6 May 2004 - 11:09

i disagree , its the persons fault that clicked yes
Some dialers install themselves just by visiting the site.
Or by clicking &#39;no&#39; you trigger the instalation <_<

Isn&#39;t there any law out there that could sue the kind of sites that "force" you to install a dialer or install it without you knowing? :angry:

luckely dialers can&#39;t do any harm to my phonebill cause whenever the phone is answered or starts calling i get disconnected from the web :D

[4play]

luckely dialers can&#39;t do any harm to my phonebill cause whenever the phone is answered or starts calling i get disconnected from the web

dialers normally set themselves as the default number to dial when you access the internet. so everytime you go online your dialing into these peoples servers and surfing threw them. these can affect you and you should be very careful when dialing out to make sure its the right number.

of course getting dsl makes these things go away since you cant actually dial out to any number through a dsl modem.

get your dad to question these calls. there are strict rules about premium rate numbers. i think having a 5 min limit is one of the rules(thats why the dialers reset after 5 mins normally). you may not have to pay the full amount if they are breaking the rules.

[Cl1mh4224rd]

Originally posted by Filliz@6 May 2004 - 20:14
Some dialers install themselves just by visiting the site.
Or by clicking &#39;no&#39; you trigger the instalation <_<
That&#39;s why Internet Explorer is crap.

[Ariel_001]

Originally posted by Cl1mh4224rd+7 May 2004 - 12:11--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Cl1mh4224rd &#064; 7 May 2004 - 12:11)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-Filliz@6 May 2004 - 20:14
Some dialers install themselves just by visiting the site.
Or by clicking &#39;no&#39; you trigger the instalation <_<
That&#39;s why Internet Explorer is crap. [/b][/quote]
Well that is weird. You mean a box like this right?

http://img8.imageshack.us/img8/1803/flash1010100.jpg

You can disable this by going to Internet explorer options -> security tab ->...

Click on the Internet zone go Custom Level then set Download signed ActiveX controls To Disable.

Image Resized
http://img8.imageshack.us/img8/492/ieaxzo.jpg' width='200' height='120' border='0' alt='click for full size view'></a>

You now should get just this.

Image Resized
[img]http://img8.imageshack.us/img8/232/isaxe111.jpg' width='200' height='120' border='0' alt='click for full size view'> (http://img8.imageshack.us/img8/492/ieaxzo.jpg' target='image'>[img)


Test it out here <a href='http://www.musicnotes.com/download/viewer/ieautodownload.asp?ppn=mn0045310]http://www.musicnotes.com/download/viewer/...p?ppn=mn0045310

[digmen1]

Thanks guys for all the replies.

Very informative and helpful.

I &#39;ll have to set up a firewall for him.

Which is the best (free) one and is it easy to configre them so he can still use Kazaalite ?

Regards

Digby

[zapjb]

Sygate personal firewall. He still needs multi-layered security.