Parasite: DialerOffline

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

A premium-rate phone dialler providing access to porn sites.

Distribution

Known to be installed by the RapidBlaster parasite, possibly also ActiveX drive-by installation.

Electronic Group are known to distribute at least two other diallers, StripPlayer and IEAccess.

What it does

Advertising

No.

Privacy violation

No.

Security issues

No.

Stability problems

None known.

Removal

There is no uninstall feature, but Spybot S&D can remove DialerOffline.

Manual removal

Open a DOS command prompt window (from Start->Programs->Accessories) and enter the commands:

cd "%WinDir%\System"
regsvr32 /u DialerOffline.dll

You can then delete the ‘DialerOffline.dll’ file inside the System folder (’System32’ on Windows NT/2000/XP) inside the Windows folder, and whatever dialler connections are using it - in the specimen I tested this was a ‘LiveGirls’ desktop icon and a folder ‘C:\blankdialer’, but this may vary.