Spy Sweeper with AntiVirus

The most award-winning anti-spyware software

Spy Sweeper with Antivirus

Get serious about removing spyware with Spy Sweeper - the award-winning anti-spyware software trusted by millions of home computer users.

Add to Cart Button

$29.95

Spyware & Virus Directory

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 

Dialer.CAPI-Anruf

Updated: September 24, 2005 04:08:08 PM GDT
Type: Dialer
Risk Impact: High
File Names: Sec_update.exe; Win32sys.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

SUMMARY


Behavior

Dialer.CAPI-Anruf is a dialer program that can be used to access various Web sites by dialing a high-cost phone number using the modem. The sites that can be accessed are mostly pornographic.

This dialer is designed specifically for ISDN users and will not work with regular modems.

Symptoms

The files are detected as Dialer.CAPI-Anruf.

Transmission

This threat was spammed as sec_update.exe, with the following email message:

Sehr geehrte Damen und Herren,
 vor kurzem haben wir festgestellt, dass sich ein neuer Virus in Umlauf befindet,
 der jedoch nicht anhand seines Dateinamens erkannt werden kann, da dieser ständig wechselt.
 
 Dieser Virus verteilt sich nicht über den eMail-Transfer, sondern direkt durch das Surfen auf
 Webseiten. Auf Grund dessen ist es sicherer, das erforderliche Sicherheitsupdate für
 Ihr System NICHT zum download anzubieten, sondern Ihnen per eMail zur manuellen
 Installation zukommen zu lassen.
 
 Wir vom Symantec - Team warnen dringend vor diesem Virus, da er nicht nur unerkannt
 in das System eindringt, sondern - sobald der Virus das System befallen hat - anfängt,
 wichtige Systemdateien von Windows bzw. Linux zu löschen.
 Wir haben ein Sicherheitsubdate entwickelt, welches das System gegen den Virus
 immunisiert. Installieren Sie das im Anhang mitgesendete Sicherheitsupdate,
 um einen Befall des Systems zu verhindern.
 
 Weitere Informationen erhalten Sie im Internet auf
 unserer Webseite www.symantec.de.


Protection

  • Virus Definitions (LiveUpdate™ Weekly) October 29, 2003
  • Virus Definitions (Intelligent Updater) October 29, 2003

TECHNICAL DETAILS


Dialer.CAPI-Anruf uses the Common ISDN Application Programming Interface (CAPI) functionality to silenty dial premium-rate numbers from your computer.

Due to the functionality of the connection provided by CAPI, Windows does not need to provide connections to a telecommunications network.

Where possible, Dialer.CAPI_Anruf will use both ISDN channels, so that a doubling of the costs is achieved.

Dialer.CAPI-Anruf will also drop a copy of itself into the %system% folder.


REMOVAL


The following instructions pertain to all Symantec antivirus products that support Security Risk detection.
  1. Update the definitions.
  2. Close modem connections.
  3. Run a full system scan and delete all the files detected as Dialer.CAPI-Anruf.
  4. Delete the value that was added to the registry.
For specific details on each of these steps, read the following instructions.

1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.

2. To close modem connections
This risk uses available modems to create an Internet connection, sometimes without any visible signs. In order to successfully remove this threat, ensure that all modem-based Internet connections are disconnected before proceeding. For instructions on how to do this, consult the appropriate Internet service provider, computer manufacturer, or operating system documentation.

3. Scanning for and deleting the files
  1. Start Norton AntiVirus and make sure that it is configured to scan all the files. For more information, read the document, "How to configure Norton AntiVirus to scan all files."
  2. Run a full system scan.
  3. If any files are detected as Dialer.CAPI-Anruf, click Delete.

4. Deleting the value from the registry

WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.
  1. Click Start, and then click Run. (The Run dialog box appears.)
  2. Type regedit

    Then click OK. (The Registry Editor opens.)

  3. Navigate to the key:

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
  4. In the right pane, delete the value:

    "win32sys"="Win32sys.exe"

  5. Exit the Registry Editor.



Spy Sweeper 5.2 stops spyware in its tracks while offering home computer users the ability to configure the program to suit their specific needs, such as:

Choose a Quick, Full or Custom Sweep: With Spy Sweeper 5.2, you can easily choose to perform a quick, full or customized sweep. If you're looking for an immediate diagnosis, choose a quick sweep. For a pinpointed search, customize your sweep to have Spy Sweeper skip files by folder or file extension. For a deep cleaning, opt for a full sweep.

Exclude Files from a Sweep: Spy Sweeper allows you to save time during a sweep by skipping specific files or different sections of your PC. You can select specific file extension, such as .xls or .mpg to exclude.

Additional Highlights

As soon as it's installed, Spy Sweeper gives 360 degrees of protection against spyware, including:

Simple Sweeps: Detecting spyware and removing unwanted programs found on your computer in three effortless steps

Easy Management: Quickly and simply configure program, sweep and upgrade options

Fast Home: Use the home screen to access the most commonly used functions of Spy Sweeper

Shields Summary: A redesigned shields summary page makes it simple to see at a glance which shields are on or off

Action Alerts: Receive clear, easy-to-understand notifications when new spyware threats are detected

"Spy Sweeper remains a favorite for protection from spyware."



"This program's dominance is apparent as soon as you install it."