Dialer.Dialpass
Dialer.Dialpass is a malicious dialer which will cause you endless computer problems. Dialer.Dialpass has the ability to make use of your Internet connection without your knowledge. It may dial an international number or a premium rate local phone number, which is geared towards bypassing your local Internet service provider. One of the fundamental problems with regard to Dialer.Dialpass is that you will end up for with very high phone bills which you will be forced to pay, as you won't be able to prove that it wasn't you dialing to this specific lines.
Dialer.Dialpass may display some of the following symptoms: You may receive very high telephone bills. If your web browser settings change by itself. There may be links created to malicious web sites. If your internet connection starts acting strange. If your computer connects by itself to the internet. Desktop shortcuts may appear that you didn't put there.
Dialer.Dialpass needs to be removed immediately upon detection. You have the option of manually removing Dialer.Dialpass or automatically removing Dialer.Dialpass. It is within your best interest to invest in a decent antispyware application that is able to detect as well as give you the option of deleting Dialer.Dialpass automatically for you. Dialer.Dialpass is something that you don't want anywhere near your computer in any way, shape or form.
Aliases
Mal/SkimTrim-B (Sophos)
Trojan:Win32/Skintrim.N (Microsoft)
Win-Trojan/Skintrim.178152 (AhnLab)
File System Modifications
- The following files were created in the system:
# File Name 1 %ProgramFiles%\Instant Access\Center\SuperBabes.lnk 2 %ProgramFiles%\Instant Access\DesktopIcons\SuperBabes.lnk 3 %ProgramFiles%\Instant Access\Multi\20100630070627\Common\module.php 4 %ProgramFiles%\Instant Access\Multi\20100630070627\dialerexe.ini 5 %ProgramFiles%\Instant Access\Multi\20100630070627\instant access.exe 6 %ProgramFiles%\Instant Access\Multi\20100630070627\js\js_api_dialer.php 7 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button1.gif 8 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button2.gif 9 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button3.gif 10 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button4.gif 11 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\dialer.ico 12 %StartMenu%\SuperBabes.lnk 13 %System%\nsinet.exe 14 %Windir%\dialerexe.ini 15 CommonDesktopDir%\SuperBabes.lnk
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\egdhtml][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF1C8E21-4045-4D67-B528-335F1A4F0DE9}\LocalServer32]HKEY..\..\..\..{RegistryKeys}(Default) = "%System%\nsinet.exe /run"ExeStartFile = "%ProgramFiles%\Instant Access\Multi\20100630070627\Common\module.php"
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.