Categories: Malware

About “Win32/Dialer.NHP” infection

The Win32/Dialer.NHP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Dialer.NHP virus can do?

Expresses interest in specific running processes
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Anomalous binary characteristics

How to determine Win32/Dialer.NHP?


File Info:
crc32: AC98ABE7md5: 70f73040b04bd10072e2e325efcc8ff3name: 70F73040B04BD10072E2E325EFCC8FF3.mlwsha1: f28de4580446b1222cf870046fb9a7fcfcaf8656sha256: d0f12bda2588a792791f7be73d708851ac33cfed631c45172d858ffd090cbb18sha512: 69f089ede7302b1d279fb0430d1a5eb09ac554a4b3ce0d3a779ddeddfa5cf88a1c8d3aec5d9ab77e60f06fedbb1214006311d1d2114f26d1c175700bb558bf80ssdeep: 3072:mtABk6WFaPw9ZjuURGaM4zNdoykXKIs00ooSLEKWCn8anfZ4FICVFFbYxtd9I+:GABk6WFaIHjuUMR4zNdoykXz0ooSLEKtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: ? Microsoft Corporation. All rights reserved.InternalName: installFileVersion: 5.2.3790.3959CompanyName: Microsoft CorporationPrivateBuild: LegalTrademarks: Comments:  ProductName: Microsoft(R) Windows(R) Operating SystemSpecialBuild: ProductVersion: 5.2.3790.3959FileDescription: Microsoft(R) Windows(R) Operating SystemOriginalFilename: install.exeTranslation: 0x0804 0x04b0

Win32/Dialer.NHP also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Dialer ( 004be7ad1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop1.56994
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojanpws.Bjlog.20461
McAfee	BackDoor-DVB.j
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanPSW:Win32/Bjlog.16282552
K7GW	Dialer ( 004be7ad1 )
Cybereason	malicious.0b04bd
Baidu	Win32.Trojan.Baijin.a
Cyren	W32/Trojan.FRJV-2550
Symantec	Backdoor.Trojan
ESET-NOD32	Win32/Dialer.NHP
Zoner	Trojan.Win32.88693
APEX	Malicious
Avast	Win32:Redosdru-D [Trj]
ClamAV	Win.Trojan.Redosdru-9753707-0
Kaspersky	Trojan-PSW.Win32.Bjlog.dxwn
BitDefender	Generic.Magania.1.1575F6E1
NANO-Antivirus	Trojan.Win32.DVB.fjzikd
ViRobot	Trojan.Win32.Agent.188416.R
SUPERAntiSpyware	Trojan.Agent/Gen-PcClient
MicroWorld-eScan	Generic.Magania.1.1575F6E1
Tencent	Backdoor.Win32.Gh0st.al
Ad-Aware	Generic.Magania.1.1575F6E1
Sophos	ML/PE-A + Troj/Redosdru-A
Comodo	TrojWare.Win32.PSW.Bjlog.~Z@k24gw
BitDefenderTheta	AI:Packer.27CA40391F
VIPRE	Backdoor.Win32.Zegost.B (v)
TrendMicro	BKDR_ZEGOST.SMF
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.70f73040b04bd100
Emsisoft	Generic.Magania.1.1575F6E1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Agent.chek
Webroot	Trojan.Dropper
Avira	BDS/Agent.188418
eGambit	Trojan.Generic
Antiy-AVL	Trojan/Generic.ASBOL.577
Kingsoft	Win32.Heur.KVM005.a.(kcloud)
Microsoft	Backdoor:Win32/PcClient.ZR
Gridinsoft	Trojan.Win32.Agent.zv!s1
AegisLab	Trojan.Win32.Agent.lb6Z
GData	Generic.Magania.1.1575F6E1
TACHYON	Trojan/W32.Agent.188416.BA
AhnLab-V3	Win-Trojan/Pbbot.231078
Acronis	suspicious
VBA32	BScope.Trojan.Agent.0135
MAX	malware (ai score=100)
Malwarebytes	Trojan.Agent
Panda	Generic Malware
TrendMicro-HouseCall	BKDR_ZEGOST.SMF
Rising	Backdoor.Bagolod!1.64B4 (CLASSIC)
Yandex	Trojan.GenAsa!d0AUU2BCWeI
Ikarus	Trojan.Win32.Redosdru
Fortinet	W32/Magania.ATH!tr.pws
AVG	Win32:Redosdru-D [Trj]
Paloalto	generic.ml