win32:dialer-970 : how to destroyed it ?

Viruses and worms
1

Hello !

My pc is infected by “win32:Dialer-970” what can I do to destroyed this sworm.
Thank you in advance.

2

I hope somebody knows a solution for this, my neighbor has the same worm and we cant get it out also.

3

Since I assume this was detected by avast ?
What action did you select when it was detected, move/rename, move to chest, delete, what did you choose ?
Move to Chest is by far the best action as it can do no harm there.

A dialler isn’t a worm but a trojan, not that the classification is that important. Do you actually have a dial-up connection ?

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

4

At the top of my head it is not only a trojan, because the first time Avast did find the file 5038_jpg.zip after a few days scanning and starterscans, wich is spreading through MSN Messenger sending everybody on the list a folder with the virus or so in it, Avast did found 5038 then it returned with Z058_jpg.zip, read your site and installed spybot, who didnt find it also and Avast cant find the Z058_jpg.zip I have found manualy Z058_jpg and removed but it is still sending a smiling face(got 6 in 20 min) from the neigbours and it is also effecting some data, the 5038_jpg.zip is still in de Avast volt I hope, and I am sorry I just know a bit about computers and virusses. this I found out is distributed from a music download site, still have to warn them, will do that tomorrow, from the neigbourshouse
Hope I give you enough information.

5

sorry, forgot to tell that even Avast his temp files where infected by it, avast did put itself in the vault, the zip file name I know because I received that in messenger the dialup is what avast found as malware about 3 times in a hour so I think the last one is nicer covered up then the 3058.
Thank you for paying attentention to this
Marrianne

6

marrianne, if a virus is replicant (coming and coming again), you could follow the general cleaning procedure:

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.

  2. Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.

  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  4. It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
    If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

  5. If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.

  6. Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

  7. After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

  8. Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.

7

thank you, for your reply I will print this out and visit the neigbors again, will let you know of it worked.
Thank you and as a other reader already you have a very informative good website even for dummies as me, thanks
With kind regard
Marrianne

8

You’re welcome, Marrianne.

9

IT WORKED ;D
I have downloaded AVG Antispyware, because it was effecting windows itself, it closed down, you should haved closed al the applications, but when I rebooted I started AVG immidiatly and then messenger started up automatically and bingo then it was found. so a mistake was my fortune. I did also use AVG now on my computer and the outcome was shocking for me, what a tracking cookies about 52 or so, and 1 high risk one, so double thanks from Samantha and Marrianne