Categories: Malware

Dialer:Win32/Adultcont removal guide

The Dialer:Win32/Adultcont is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dialer:Win32/Adultcont virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Dialer:Win32/Adultcont?


File Info:
name: ABC75E359E2E4362FDA8.mlwpath: /opt/CAPEv2/storage/binaries/657c37e12dd01b6dcb4875c2a59f8df04cc84d249afd3d176e79e8c5825c9661crc32: 2816BB5Dmd5: abc75e359e2e4362fda8491d05ab5b30sha1: 20b3f2608d39212e41a4955ada88b5f69dfb7c9dsha256: 657c37e12dd01b6dcb4875c2a59f8df04cc84d249afd3d176e79e8c5825c9661sha512: 96d6bf61238d20402558fb14999e2e8201535e38eb22148bcd43e8a7a1a5dcab09c6230b59f19b31d5c0f8707e3e5dea468bb0517cfd6fab12dcf331cbbf1559ssdeep: 384:NAu8V8Xh6n0HZLvFTgA8ToRd7+iDrc7aR1Gp2x/VTD3PlQW5R9TIwWm4XTWKG:NAu8qXhBLxlwmRDiAGk/Z3CWhTkXvtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C683CF6191BC4272F7FB1B31D895476B26B3BE4482B9534E7C14230BB4E87666E1C9C3sha3_384: b9ea758610e721171f3b84ce6036105e9403787d3c5e58961f69950f1448d4514144b072fb0dac0a71f9c1a27169cfc6ep_bytes: 60be008040008dbe0090ffff5783cdfftimestamp: 2004-02-29 10:11:51
Version Info:
CompanyName: Microsoft CorporationFileDescription: Microsoft Home AssistFileVersion: 6.0.2600.2180InternalName: homeassistLegalCopyright: © Microsoft Corporation. All Rights Reserved.OriginalFilename: homeassistProductName: MicrosoftR WindowsR Operating SystemProductVersion: 6.0.2600.2180Translation: 0x0409 0x04b0

Dialer:Win32/Adultcont also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Strictor.279530
ClamAV	Win.Trojan.Agent-874975
Skyhigh	BehavesLike.Win32.Fake.mz
McAfee	Artemis!ABC75E359E2E
Zillya	Trojan.Scar.Win32.3531
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Dialer ( 004d02ea1 )
Alibaba	Trojan:Win32/AntiAV.dfc34bbd
K7GW	Dialer ( 004d02ea1 )
Cybereason	malicious.08d392
VirIT	Trojan.Win32.Agent.AWB
Symantec	Dialer.Trojan
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Dialer.NKM
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Strictor.279530
NANO-Antivirus	Trojan.Win32.Netvision.brmynp
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.114e9315
Emsisoft	Gen:Variant.Strictor.279530 (B)
DrWeb	Dialer.Netvision.753
VIPRE	Gen:Variant.Strictor.279530
TrendMicro	TSPY_ONLINEG.GXJ
FireEye	Generic.mg.abc75e359e2e4362
Sophos	Mal/Dial-C
Ikarus	Trojan.Win32.Bombibom
GData	Gen:Variant.Strictor.279530
Jiangmin	Trojan/Scar.adp
Webroot	W32.Sisproc.Gen
Google	Detected
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.Unknown
Kingsoft	malware.kb.b.972
Xcitium	TrojWare.Win32.Agent.agq@4n4exy
Arcabit	Trojan.Strictor.D443EA
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Dialer:Win32/Adultcont
Varist	W32/Agent.XW.gen!Eldorado
AhnLab-V3	Win-Trojan/Agent22.Gen
VBA32	BScope.Trojan.KillFiles
ALYac	Gen:Variant.Strictor.279530
MAX	malware (ai score=100)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TSPY_ONLINEG.GXJ
Rising	Dropper.Generic!8.35E (CLOUD)
Yandex	Trojan.GenAsa!Rgrt7zxenLs
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.425.susgen
Fortinet	W32/Dialer.NKM!tr
BitDefenderTheta	Gen:NN.ZexaF.36744.fmNfaeutqzai
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)