Home Malware Programs Dialers Dialer.Dialpass

Dialer.Dialpass

Posted: December 22, 2010

Dialer.Dialpass is a malicious dialer which will cause you endless computer problems. Dialer.Dialpass has the ability to make use of your Internet connection without your knowledge. It may dial an international number or a premium rate local phone number, which is geared towards bypassing your local Internet service provider. One of the fundamental problems with regard to Dialer.Dialpass is that you will end up for with very high phone bills which you will be forced to pay, as you won't be able to prove that it wasn't you dialing to this specific lines.

Dialer.Dialpass may display some of the following symptoms: You may receive very high telephone bills. If your web browser settings change by itself. There may be links created to malicious web sites. If your internet connection starts acting strange. If your computer connects by itself to the internet. Desktop shortcuts may appear that you didn't put there.

Dialer.Dialpass needs to be removed immediately upon detection. You have the option of manually removing Dialer.Dialpass or automatically removing Dialer.Dialpass. It is within your best interest to invest in a decent antispyware application that is able to detect as well as give you the option of deleting Dialer.Dialpass automatically for you. Dialer.Dialpass is something that you don't want anywhere near your computer in any way, shape or form.

Aliases

Skintrim.gen.f (McAfee)
Mal/SkimTrim-B (Sophos)
Trojan:Win32/Skintrim.N (Microsoft)
Win-Trojan/Skintrim.178152 (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\Instant Access\Center\SuperBabes.lnk
    2 %ProgramFiles%\Instant Access\DesktopIcons\SuperBabes.lnk
    3 %ProgramFiles%\Instant Access\Multi\20100630070627\Common\module.php
    4 %ProgramFiles%\Instant Access\Multi\20100630070627\dialerexe.ini
    5 %ProgramFiles%\Instant Access\Multi\20100630070627\instant access.exe
    6 %ProgramFiles%\Instant Access\Multi\20100630070627\js\js_api_dialer.php
    7 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button1.gif
    8 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button2.gif
    9 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button3.gif
    10 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\button4.gif
    11 %ProgramFiles%\Instant Access\Multi\20100630070627\medias\dialer.ico
    12 %StartMenu%\SuperBabes.lnk
    13 %System%\nsinet.exe
    14 %Windir%\dialerexe.ini
    15 CommonDesktopDir%\SuperBabes.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\egdhtml][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF1C8E21-4045-4D67-B528-335F1A4F0DE9}\LocalServer32]HKEY..\..\..\..{RegistryKeys}(Default) = "%System%\nsinet.exe /run"ExeStartFile = "%ProgramFiles%\Instant Access\Multi\20100630070627\Common\module.php"
Loading...