TechSpot

Dial-up hijacker

By PeteHamborg
Dec 29, 2005
Topic Status:
Not open for further replies.
  1. Can someone help?

    My dial-up connection becomes dis-enabled and a hi-jacker dials a premium rate phone number every time I go online. Thankfully I have premium rate numbers blocked from my phone-line, but this is still a real problem. The phone company is called 'Global Access S.L.' I know this from the properties on the pornographic type icon on my desktop, called "Access members area." I can honestly say that I don't know how it got there, although I am not the only person who uses this computer...

    I have used the "HijackThis" version v1.99.1 to create a log file, which is attached to this message saved as a txt file. A spyware expert may know what to do?

    Many thanks,

    Peter
  2. RealBlackStuff

    RealBlackStuff Newcomer, in training Posts: 8,165

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\MQMPDD42\hijackthis_sfx[1].exe
    Install and run CrapCleaner from http://www.ccleaner.com/

    O4 - HKLM\..\Run: [links] links.exe
    Follow this advice: http://www.greatis.com/appdata/d/c/c;_links.exe_Removal.htm

    O4 - Global Startup: Digital Line Detect.lnk = ?
    O4 - Global Startup: Watch.lnk = ?
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by103fd.bay103.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://66.117.37.13/dba1402.exe
    Fix these with Hijackhtis

    O17 - HKLM\System\CCS\Services\Tcpip\..\{A496C0AB-DF07-4915-8A72-8A0A175F35C1}: NameServer = 158.152.1.58 158.152.1.43
    If not your ISP, Fix with HJT

    66.117.37.1 belongs to Carpathia Hosting in USA
    158.152.1.58 belongs to Demon Net in the UK

    follow the advice in these posts:
    Read: How to remove Trojans and its ilk!
    Read: How to remove Begin2Search/Coolwebsearch and Other Nasties
  3. PeteHamborg

    PeteHamborg Newcomer, in training Topic Starter

    Thank you, Dial-Up Hijacker removed

    Thank you for replying to my post about removing the Global Access S.L. dial-up hijacker. The first few clean up programs that I tried did not rid me of the problem, namely Ad-Aware, CrapCleaner, and Spyaudit1. The link that eventually did remove the problem was the 'Ewido Security Suite,' and this was a free downlaod too. My internet is now quicker and cleaner than it's ever been as a result.

    I hope this post may be helpful for anyone who suffers from the same dial-up hijacker.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.