Dial/Adpower

Analysis

The file detected has the following file properties:
Filename: internazionale_ver5.ocx
File Size: 53,248 bytes
File Version: 1.0.0.0
Company: 7H
Internal Name: internazionale_ver5
Language: Italian
Product Name: VacPro
Filename: olanda_win98.ocx / slov_ver3 / internazionale_ver10.ocx / internazionale_ver15.ocx / emsat_win98.ocx / slov_win98.ocx / win98_P.ocx
File Size: 49,152 bytes
File Version: 1.0.0.0
Company: 7H
Internal Name: olanda_win98 / slov_ver3 / internazionale_ver10 / internazionale_ver15 / emsat_win98 / slov_win98 / win98_P
Language: Italian
Product Name: VacPro
Spyware Behavior:
Dial/226 may do the following behavior:

• Display the following disclaimer in Italian:
  Disclaimer Accepted on:
  ------------------- ACCESSO AD AREA RISERVATA. -------------------
  CLICCA SU 'OK' per accettare i termini e le condizioni di utilizzo qui riportate. la connessione con il vostro isp, al nostro server ed avrete ACCESSO IMMEDIATO all'AREA RISERVATA! Non ci sono altri costi aggiuntivi, pagherete solo il costo per una durata max di 60 min.
  ADESSO CLICCA SU OK e BUON DIVERTIMENTO!
  when translated:
  Disclaimer Accepted on:
  ------------------- ACCESS TO RESTRICTED AREA. -------------------
  CLICK ON 'OK' in order to accept the terms and the conditions of I use here brought back. the logon with your isp, our server and YOU WILL HAVE APPROACHED IMMEDIATE the RESTRICTED AREA! Note there are other costs added to you, you will pay alone the cost for one duration max of 60 min.
  NOW CLICK ON OK and GOOD DIVERTIMENTO!
  
• Relate to the following email address or websites:
  nouser@7adpower.com, www.7adpower.com, and srvtray.com
  
• Create the folder C:\dialer\Creazione dialer\Vac Pro num cript P and drop the file objsafe.tlb
  
• Update registry entries under
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\zones\3
  
• Use an external dll program, MSVBVM60.DLL, which is the "Visual Basic Virtual Machine" version 6.0