I've been ripped off!

stereo_steve

There I was sitting on the couch watching M*A*S*H enjoying it, not a care in the world!

I heard my computer in the background start to dial on to the internet. *Or so I thought*

I waited about about 2/3mins for mash to end and went over to the pc. It showed a counter in the taskbar counting up in euro. I checked who the computer had dialed up with. It said NV. Went to my dialup folder and saw two connections to choose from. My usual internet dial up connection and the mysterious NV connection. Just then it vanished. I hope the comnputer hasn't been doing this alot.

I've searched through the computer and can't find a trace of the program that did it. I went to have a look in the registry and I'm not allowed! All of a sudden I need administrator privilidges! I'm the owner and I'm locked out.

Rang eircom to check what number was dialed. The woman on the phone told me that they can't check what numbers were dialed between billing periods. She also said they have no fraud department!?!

So can anyone help clear this up?

1. Anyone ever get a program like this? Dial up randomly to a premium number.

2. What rights do I have? Do I have to pay a vicious phonebill at the end of the month? I didn't make the call/s

3. Any suggestions for getting into my registry? Should give me some clues. I tried safe mode.

4. Can eircom check the number dialed? And do they have a fraud department? Should I bother telling them? Can they lock out that number from being called?

seamus

It's a porn dialer and they're a pain in the arse.

Your computer dialled, unfortunately, you are liable.

Do four thingss:
Get Ad-aware ( http://www.lavasoftusa.com ) and scan your entire machine. It'll clear out all the crap.

Download a good browser ( http://www.mozilla.org/products/firefox/ for example) that won't allow these things to install themselves without your consent.

Go into your Internet Options (Start->Run...->Type "control inetcpl.cpl") into the Connections tab and select "Never dial a connection". Then create a link to your dial up connection on your desktop.

Discontinue using Internet Explorer for anything but Windows Update and badly-written websites.

Problem solved

sceptre

Originally posted by stereo_steve
1. Anyone ever get a program like this? Dial up randomly to a premium number.

These programs are commonly referred to as diallers (which is an approriate name really). They're a feature of many porn and warez sites but there are plenty of diallers on otherwise innocuous sites. I've never had the misfortune to get one (then again I don't use Internet Explorer).

2. What rights do I have? Do I have to pay a vicious phonebill at the end of the month? I didn't make the call/s

You don't really have any rights. Your computer made the calls.

3. Any suggestions for getting into my registry? Should give me some clues. I tried safe mode.

Screw getting into the registry. Download Adaware from Lavasoft and Spybot Search and Destroy. They'll root out your dialler and kill it dead like Harpic does with germs.

4. Can eircom check the number dialed? And do they have a fraud department? Should I bother telling them? Can they lock out that number from being called?

Eircom don't care. Think of all the money they're making from misfortunate people who get diallers on their machines. They even moved some of these territories (like Diego Garcia) into a higher band last year so they could make more money from it. They can block this type of number for you but they'll charge you a fiver a month for doing so. Ring them and complain anyway but you'll be very unlikely to get any satisfaction.

Download those two programs. Adaware is available from Lavasoft, grab Spybot from here. Update the definitions as soon as you install them.Be paranoid, use them regularly.

stereo_steve

Thanks for the replies guys. I used the spyware programs. They both found alot!!

Hopefully it doesn't happen again and I don't have a massive phonebill.

Surely this must be illegal though? Could I just write a little program myself and have it ring my own 1580 number?

shoegirl

I'm not sure its a good idea to leave your modem permanently disconnected to the internet. My father once left his modem connected and ended up with a 10 hour internet call that wasn't properly disconnected. Even quite legitimate programs like anti virus often want to dial up for updates, which is ok, but you might want to control the time of connections if you're not on an anytime flatrate.

I always disconnect my cable physically when not in use - it prevents problems like this.

ssh

If you boot into safe mode, you might be able to get into your registry. If you can, search for this string

DisableRegistryTools

and change it from 1 to 0.

po0k

Originally posted by shoegirl
I'm not sure its a good idea to leave your modem permanently disconnected to the internet. My father once left his modem connected and ended up with a 10 hour internet call that wasn't properly disconnected. Even quite legitimate programs like anti virus often want to dial up for updates, which is ok, but you might want to control the time of connections if you're not on an anytime flatrate.

there's a setting under Dial-up Conenction porperties to disconnect if idle for xx number of seconds/minutes.

I always disconnect my cable physically when not in use - it prevents problems like this.

Yeah, SOP if you're not using the machine to be honest, will protect a bit against any surges etc. on the phone lines that the SLICs don't pick-up (lightening etc.).

madboy

I've had 2 mates caught out when they thought they were looking at "Free P**n"
300€ and 400€ were the two bills,one still lives with his ma it was very embaressing for all concerned
I use norton firewall to keep badies out the new Internet Securitys 2004 also has a spam blocker also spybot and adaware but i'm careful where i surf now. its taken some time to learn what to look out for and where not to go but always remember there is lots of free stuff on the net but u have to use these sites correctly or else u run into this kind of trouble

also go to PCPITSTOP.com its a good online pc maintenence prog
it will tell u if ur browser is set up ok for cookies and java and more also it can tell u what progs are running at the time so u can see any sneaky ones in the background
I feel safe using this site and no they aren't paying me