Home Malware Programs Dialers RatedXXX

RatedXXX

Posted: March 28, 2006

RatedXXX is a dialer that connects a compromised PC to the Internet by dialing premium rate phone numbers using a modem. The threat also changes the Internet Explorer default home page to a web site on the wazzupnet.com domain. RatedXXX must be manually installed.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ratedxxx.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]
Loading...