Home Malware Programs Dialers Ulubione

Ulubione

Posted: March 28, 2006

Ulubione is a dialer that connects to the Internet and accesses adult resources via high-cost phone number. It doesn't spread by itself, the user installs it manually. Ulubione starts on every Windows startup. Its files can be found in following default computer directories: C:Windows or C:Winnt and C:WindowsSystem, C:WindowsSystem32 or C:WinntSystem32.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 chkreg.dll
    2 powerprof.dll
    3 sysmd.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}CheckRegistryHKEY_ALL_USERSSOFTWAREMicrosoftWindowsCurrentVersionRunRegistryCheck=rundll32.exechkreg.dllHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunLoadPowerScheme=rundll32.exepowerprof.dllCheckPowerProfileHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSysr=%Windir%sysmd.exe
Loading...