Trojan.Dialer.EG

SYMPTOMS:

Presence of Montorgueil directory under %ProgramFiles% directory.

TECHNICAL DESCRIPTION:

This Trojan is a Hot/Elite Dialer, used to access pornographic material by dialing a high-cost number.

When first run, creates a directory with the same name as the executable used to launch the program under %ProgramFiles%\Montorgueil\ where it copies itself
(i.e.: if the user starts MyDialer.exe, then the trojan will copy itself as %ProgramFiles%\Montorgueil\MyDialer\MyDialer.exe)

Creates registry entries under HKCU\Software\Montorgueil\Kit\

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Alexandru Maximciuc ,virus researcher