All-In-One Telcom Description

All-In-One Telcom, also known as win32us.exe, is a telecom dialer that will take control of the user’s modem and attempt to dial telephone numbers (usually international at expensive rates) so that it can install pornographic material and save it on the user’s PC. All-In-One Telcom is also a security risk to the user’s computer as it can cause a significant slow down in the PC’s performance, loss of data and the dissemination of sensitive personal information.

Type: Dialers

Aliases: win32us.exe.

Automatic Detection of All-In-One Telcom

All-In-One Telcom has typically the following processes in memory:

• connect2party.exe
• nsupdate.dll
• hotactiondating-uninstall.exe
• stmtdlr.exe

All-In-One Telcom creates the following registry entries:

• da9a0b1d-9b7b-11d3-b8a4-00c04f79641c
• HKEY_LOCAL_MACHINEsoftwareclasseshadatefile
• etscapenavigatorusertrustedexternalapplicationsc:programfilesdialershotactiondatinghotactiondating.exe
• .DEFAULT\Software\Netscape\Netscape Navigator\Suffixes\application/x-2PARTY\
• .DEFAULT\Software\Netscape\Netscape Navigator\Viewers\application\x-2PARTY\connect2party.exe
• MIME\Database\Content Type\application/x-2PARTY\\connect2party.exe
• .2PARTY
• NSUpdateLite.NSUpdateLiteCtrl
• da9a0b0f-9b7b-11d3-b8a4-00c04f79641c
• HKEY_CLASSES_ROOTmimedatabasecontenttypeapplication/x-hadate
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallhotactiondating
• HKEY_USERSs-1-5-21-329068152-1677128483-854245398-500softwaresiteicons
• .DEFAULT\Software\Netscape\Netscape Navigator\User Trusted External Applications\c:\program files\dialers\connect2party\connect2party.exe
• .DEFAULT\Software\Netscape\Netscape Navigator\Viewers\application\TYPE35\connect2party.exe
• .DEFAULT\Software\Netscape\Netscape Navigator\Viewers\application\TYPE35
• DA9A0B1E-9B7B-11D3-B8A4-00C04F79641C
• HKEY_CLASSES_ROOT.hadate
• HKEY_CLASSES_ROOThadatefile
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionshareddllsc:windowsdownloadedprogramfileseconnect.dll
• HKEY_USERSs-1-5-21-329068152-1677128483-854245398-500softwaremicrosoftwindowscurrentversionexplorermenuorderstartmenu2programshotactiondating
• .DEFAULT\Software\Netscape\Netscape Navigator\Viewers\application/x-2PARTY\
• .DEFAULT\Software\Netscape\Netscape Navigator\Suffixes\application\x-2PARTY\connect2party.exe
• MIME\Database\Content Type\application\x-2PARTY\
• 2PARTY File
• NSUpdateLite.NSUpdateLiteCtrl.1

Important Article Disclaimer