PhoneStealer.A
Threat LevelDamageDistribution

Effects 

PhoneStealer.A carries out the following actions:

• It checks if the affected system connects to the Internet via MODEM.
• If so, it modifies the MODEM configuration in order to reduce the transmission speed to 28 kbps and as a result, it makes the Internet connection slow down considerably.
• It obtains the lists of telephone numbers stored in the email programs that the user has in the computer. Programs such as Outlook, Yahoo or Messenger.
• Then, PhoneStealer.A sends the data it has gathered to its author.

Means of transmission 

PhoneStealer.A reaches the computer in a file called PROGRAMS.EXE.

PhoneStealer.A does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

Further Details  

PhoneStealer.A is written in the programming language Visual Basic v6.0. This Trojan is 32,768 bytes in size.