Malware

Win32/Dialer.DialHub removal instruction

Malware Removal

The Win32/Dialer.DialHub is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Dialer.DialHub virus can do?

  • Uses Windows utilities for basic functionality
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Uses suspicious command line tools or Windows utilities
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Dialer.DialHub?


File Info:

name: B144875D069A24851876.mlw
path: /opt/CAPEv2/storage/binaries/1218fe610a00238344cd682d3be5cd7bf81f8a44f9a27cd8baa16d46d4961a27
crc32: D60EF712
md5: b144875d069a2485187625fad38e1bcb
sha1: b7248add5f955ddb066ef2cca2e04bbcc0264ac2
sha256: 1218fe610a00238344cd682d3be5cd7bf81f8a44f9a27cd8baa16d46d4961a27
sha512: 4864baee3f7cd39688d3e597dee242c70e7be5838fa252c448efb2ee88cb574e05fe3c32b6b9ef7f17c9962b83472cb067d0a183d3ece1743de8699ae1f24a6f
ssdeep: 3072:0uinGxCl1KCI8vLcP5T9YgrFEGaMSZOVI74CdkU4xfvNTl1mbZxB:0uiGs7ZDQVFEhZ8VI8CsxZ/m
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CEF3128C37C64456F2A64CB90E3AEFFB46648D42169DEA435C41B7EE4478BD4AF08B43
sha3_384: 751a1cbefb856e50b865fd8782871b78ed5a8e7c61ac0b921afc08012e6e1b45f5f2d939abad102627a04bc393a22cc7
ep_bytes: 60be004046008dbe00d0f9ff5783cdff
timestamp: 2007-05-09 17:16:03

Version Info:

AffiliateID: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FileDescription: Content Access Plugin
FileVersion: 6, 1, 0, 0
ProductVersion: 6, 1, 0, 0
Translation: 0x0809 0x04b0

Win32/Dialer.DialHub also known as:

BkavW32.AIDetectMalware
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.GenericKDZ.95530
FireEyeTrojan.GenericKDZ.95530
CAT-QuickHealDialer.Coulomb.A4
SkyhighBehavesLike.Win32.Dropper.cc
McAfeeGenericRXAA-AA!B144875D069A
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDialer.PluginAccess.Win32.160
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00533b0e1 )
AlibabaRiskWare:Win32/PluginAccess.1d8e8eab
K7GWTrojan ( 00533b0e1 )
Paloaltogeneric.ml
SymantecDialer.Target
ESET-NOD32a variant of Win32/Dialer.DialHub
APEXMalicious
TrendMicro-HouseCallDIAL_RAS.HQ
AvastWin32:Dialer-ANI [Trj]
ClamAVWin.Trojan.Ag-1
Kasperskynot-a-virus:Porn-Dialer.Win32.PluginAccess.s
BitDefenderTrojan.GenericKDZ.95530
NANO-AntivirusRiskware.Win32.PluginAccess.vibv
RisingTrojan.Dailer!1.674C (CLOUD)
EmsisoftTrojan.GenericKDZ.95530 (B)
F-SecureDialer.DIAL/131072.B
DrWebDialer.Coulomb
VIPRETrojan.GenericKDZ.95530
TrendMicroDIAL_RAS.HQ
SophosMal/DownLdr-O
Ikarusnot-a-virus:Porn-Dialer.Win32.PluginAccess
JiangminTrojan/Dialer.Dlrdir.iu
WebrootW32.Dialer.Gen
GoogleDetected
AviraDIAL/131072.B
VaristW32/PornDialer.F.gen!Eldorado
Antiy-AVLGrayWare[Porn-Dialer]/Win32.PluginAccess
Kingsoftmalware.kb.b.951
MicrosoftTrojan:Win32/Vindor!pz
XcitiumApplicUnwnt.Win32.PornDialer.PluginAccess.~A@5twr9
ArcabitTrojan.Generic.D1752A
ZoneAlarmnot-a-virus:Porn-Dialer.Win32.PluginAccess.s
GDataTrojan.GenericKDZ.95530
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.Dialer.R6606
BitDefenderThetaGen:NN.ZexaF.36804.kmKfaO05Esii
ALYacTrojan.GenericKDZ.95530
VBA32BScope.Trojan.Snojan
Cylanceunsafe
PandaDialer.Gen
TencentMalware.Win32.Gencirc.115249f6
YandexTrojan.GenAsa!ZYGQb5QHqCQ
MAXmalware (ai score=100)
FortinetRiskware/Dial
AVGWin32:Dialer-ANI [Trj]
DeepInstinctMALICIOUS
alibabacloudSoftware:Win/Dialer.DialHub

How to remove Win32/Dialer.DialHub?

Win32/Dialer.DialHub removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment