Dialer-Offline


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·



Overview

Summary:

A premium-rate phone dialer providing access to porn sites.

Vendor Notes:

A premium-rate phone dialer providing access to porn sites.

Category:

Dialer: Software that dials a phone number. Some dialers connect to local Internet Service Providers and are beneficial as configured. Others connect to toll numbers without user awareness or permission.

Similar Pests:

Dialer

Origins

Group:

StripPlayer

Vendor:

StripPlayer

Date of Origin:

December, 2002

Distribution

Distribution:

Known to be installed by RapidBlaster, possibly also ActiveX drive-by installation.

Prevalence:

  • Dialer-Offline: 7.8%
  • More Info

    Clot Factor:

  • Dialer-Offline: 53
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Growth:

  • Dialer-Offline: Insufficient data to report growth
  • Operation

    Advertising:

    No.

    Risks

    Privacy Issues:

    No.

    Security Issues:

    No.

    Stability Issues:

    None known.

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    No uninstall feature.

    Open a DOS command prompt window (from Start->Programs->Accessories) and enter the command (for Windows 95/98/Me):

    "%WinDir%\SYSTEM\regsvr32.exe" /u "%WinDir%\System\DialerOffline.dll"
    Or, on Windows NT/2K/XP:

    regsvr32.exe /u "%WinDir%\System32\DialerOffline.dll"
    You can then delete the 'DialerOffline.dll' file inside the Windows System[32] folder, and whatever dialler connections are using it - in the specimen I tested this was a 'LiveGirls' desktop icon and a folder 'C:\blankdialer', but this may vary.

    Stop Running Processes:

    Kill these running processes with Task Manager:

    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Remove Directories:

    Remove these directories (if present) with Windows Explorer:

    Research

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • Andrew Clover
  • PestPatrol's Pest Research Center
  • Last Revised:

    April 02, 2005