Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Dial/PVM-A

Feb 16, 2004 11:34PM PST

Type
Dialler

Description
Dial/PVM-A is a premium rate dialler application for accessing sites containing sexually explicit content.
When first run the dialler copies itself as hotsurprise.exe to a new sub-folder of the Program Files folder named \pvm\dialers\hotsurprise\ and creates the following registry entry to run itself automatically on startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\HotSurprise
= <Program Files>\PVM\Dialers\HotSurprise\HotSurprise.exe

The following registry entries are also created:


Read more: http://www.sophos.com/virusinfo/analyses/dialpvma.html

Discussion is locked