Win32.DialWeb
|
Description:
|
Dialer
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Tuesday, April 15, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Win32.DialWeb Dialer is an ActiveX drive-by-installer used primarily to load premium-rate phone diallers.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
ELIMINAR SPYWARE »
Geographical Distribution of Threat "Win32.DialWeb"
Threat Info
View All
Detected Items
- Detected Files:
%APPDATA%\ScaricaMP3.exe
MD5: 6B2F2708DE918AC28A14CD312F36A205 Size:23040
MD5: F3A0ED34D3B252B9203AC4E107D751F6 Size:23040
MD5: 062CC382C08EA33FDD4E898AD1C1AECA Size:23552
MD5: F8D9DDEDEB04128092FDB0CE0B2F59FF Size:23552
MD5: 3E4DA0C1CE9BCCF072654AA4B1269A89 Size:23040
MD5: 484057FDD1B01C70899569406F2994F4 Size:25600
MD5: EC860B9A306906BD115C35244B3B35DB Size:23040
%APPDATA%\SCARICAMP3.EXE
MD5: B28A4138E5F1F74828065C3811221AEB Size:25600
- Detected Files with variable Filenames:
MD5: F69BB95FB70C2E996D112C4EA45F39CC Size: 23552
%APPDATA%\SCARICAMP3.EXE
%SystemDiskRoot%\Documents and Settings\Administrator\Desktop\VARIE DALLA RETE\PHILIPS\WEBCAM\ScaricaMP3.exe
%SystemDiskRoot%\Documents and Settings\Administrator\Dati applicazioni\ScaricaMP3[1].exe
Detecting items list:
- Files by Name
%APPDATA%\ScaricaMP3.exe
%APPDATA%\ScaricaMP3.ico
%APPDATA%\IconoAccesoDir1.ico
%APPDATA%\IconoAccesoDir2.ico
%DESKTOP%\ScaricaMP3.lnk
%DESKTOP%\Scaricando MP3.lnk
%DESKTOP%\Cersa Sul Web.lnk
%sysdir%\Cersa Sul Web.lnk
%sysdir%\Scaricando MP3.lnk
- Files by MD5
MD5: F69BB95FB70C2E996D112C4EA45F39CC Size: 23552
- Registry Keys
HKCU\Software\Matrix\ScaricaMP3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{16930DCA-0910-4C00-86FF-0C73872D4ABA}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{16930DCA-0910-4C00-86FF-0C73872D4ABA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{810B72CB-566A-409B-B6A3-31F720C16FAE}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{810B72CB-566A-409B-B6A3-31F720C16FAE}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A2199168-22AC-44A3-BA5F-8A83E693FEBF}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A2199168-22AC-44A3-BA5F-8A83E693FEBF}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4445FEB-6D20-47CB-9ACF-9D142A7F680A}
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4445FEB-6D20-47CB-9ACF-9D142A7F680A}
- Registry Values
HKCU\Software\Microsoft\Windows\CurrentVersion\Run ValueName=ScaricaMP3 Value=%APPDATA%\ScaricaMP3.exe t
«
Go to Software Database
