Malware

Dialer:Win32/PornDialer.G removal

Malware Removal

The Dialer:Win32/PornDialer.G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dialer:Win32/PornDialer.G virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Dialer:Win32/PornDialer.G?


File Info:

crc32: 4E259421
md5: 4c8555b7238a13bd380c5699778d4a47
name: 5-2-46-5.exe
sha1: 1b41f8630eb355eb610b9fe8f8051e23753df62c
sha256: 902555e72168f67bd4abead2f42fc22407b1f500ce03cca6390d9988f38f0383
sha512: efdaceae8017c5b620d089453fae3dc4a4477cbde3a361576a98abff0287fdb02f5ee54bf686b03029c8fd400a4fe6564b27db1e3b0a11bc4689a8547ab47bed
ssdeep: 1536:Kx/0fXKXAkU49OV+SGEYBocUaAuCSXebCM4TzeX2b85E3:Kx/0f7dwBoKUSubGTCs8S
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 2001-2002 keen+partner gmbh
InternalName: webdialer
FileVersion: 3, 0, 0, 53
CompanyName: keen+partner gmbh
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: webdialer
SpecialBuild:
ProductVersion: 4, 0, 0, 2
FileDescription:
OriginalFilename:
Translation: 0x0407 0x04b0

Dialer:Win32/PornDialer.G also known as:

DrWebDialer.Webdial
MicroWorld-eScanApplication.Dialer.Q
FireEyeApplication.Dialer.Q
CAT-QuickHealTrojan.GenericRI.S7513510
ALYacApplication.Dialer.Q
VIPREBehavesLike.Win32.Malware.wsc (mx-v)
SangforMalware
K7AntiVirusDialer ( 00046bb31 )
BitDefenderApplication.Dialer.Q
K7GWDialer ( 00046bb31 )
CrowdStrikewin/malicious_confidence_60% (W)
Invinceaheuristic
BitDefenderThetaGen:NN.ZexaF.33556.dmKfa8qiXmu
CyrenW32/Dialer.S.gen!Eldorado
SymantecDialer.Generic
TotalDefenseWin32/Dialer.Webdialer
APEXMalicious
ClamAVWin.Trojan.Dialer-83
GDataApplication.Dialer.Q
KasperskyTrojan.Win32.Scar.ogkx
NANO-AntivirusRiskware.Win32.WebDialer.bnzio
RisingWorm.Tedeos!8.5B48 (TFE:5:ZxtPSdMDPuN)
Ad-AwareApplication.Dialer.Q
SophosDial/WebDial-A
ComodoApplicUnwnt.Win32.PornDialer.Webdialer.DA@4n4flj
F-SecureDialer.DIAL/000153
ZillyaDialer.WebDialer.Win32.96
TrendMicroDIAL_RAS.HT
McAfee-GW-EditionDialer-RAS.c.gen
CMCPorn-Dialer.Win32.Small!O
EmsisoftApplication.Dialer.Q (B)
IkarusDialer
F-ProtW32/Dialer.S.gen!Eldorado
JiangminPorn-Dialer.WebDialer.k
WebrootW32.Dialer.Gen
AviraDIAL/000153
MAXmalware (ai score=77)
Antiy-AVLGrayWare[Porn-Dialer]/Win32.WebDialer
Endgamemalicious (moderate confidence)
ArcabitApplication.Dialer.Q
SUPERAntiSpywareTrojan.Agent/Gen-Dialer
ZoneAlarmTrojan.Win32.Scar.ogkx
MicrosoftDialer:Win32/PornDialer.G
AhnLab-V3Unwanted/Win32.Dialer.R101528
McAfeeDialer-RAS.c.gen
VBA32PornDialer.WebDialer
CylanceUnsafe
PandaDialer.Gen
ESET-NOD32a variant of Win32/Dialer.WebDial
TrendMicro-HouseCallDIAL_RAS.HT
YandexDialer.Webdialer.Gen
SentinelOneDFI – Suspicious PE
FortinetW32/Dialer.DIAL!tr
AVGWin32:Dh-A [Heur]
Cybereasonmalicious.7238a1
AvastWin32:Dh-A [Heur]

How to remove Dialer:Win32/PornDialer.G?

Dialer:Win32/PornDialer.G removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment