CashDialer Dialer Profile
Title: CashDialer
Also Known as: Dialer-CashDialer, OpenMe
Severity scale:
CashDialer was first discovered on July 9 of 2003. The identity of its creator is unknown, but it is probably transmitted from websites with online gambling content. Dialers intend nothing but exploitation of the infected computer, which could lead to serious financial risks for the user.
CashDialer, like pretty much any other Dialer, is installed on your computer invisibly by an ActiveX drive-by download. Other methods of transmission include email attachments and Worm-style instant messaging transmissions.
CashDialer’s main mode of exploitation is that it hijacks your dial-up modem. It then uses it to call long distance numbers or “900” phone numbers instead of the user’s typical ISP, without the awareness or approval of the user. This can result in enormous phone bills that the user may be unaware of. The vendor and the owner of the 900 number usually “split the take.” It then automatically downloads online casino software without the user’s consent.
CashDialer can also serve as a component for other malware programs. Trojans, like Backdoors and Downloaders are common this way, as are Worms. This function has turned into a more regular use for Dialers, since dial-up modems aren’t used as much as they used to. In this function, it makes the connection to the server’s website, usually by using IRC technology.
If you find out that you are infected with CashDialer, you should remove it immediately with an antispyware program such as the award-winning SpyZooka. SpyZooka guarantees 100% complete removal of CashDialer.
Also Known As:
Dialer-CashDialer
OpenMe
Trojan.Win32.DSS
Spyware Type:
Dialer
Trojan Downloader
Associated Files:
c-a-s-i-n-o.exe
openme.exe
C:\Program Files\GrandVirtual\C-a-s-i-n-o\ C-a-s-i-n-o.LNK
C:\Program Files GrandVirtual\C-a-s-i-n-o\ Uninstall C-a-s-i-n-o.LNK
C:\Windows\Start Menu\Program\C-a-s-i-n-o\ C-a-s-i-n-o.LNK
C:\Windows\Start Menu\Program\C-a-s-i-n-o\ Uninstall C-a-s-i-n-o.LNK
HKEY_LOCAL_MACHINE\Sofware\Casino Fantasy
HKEY_CURRENT_USER\Software\Microsoft\Winres
My computer was infected the last days with CashDialer. It was a real problem for me, my antivirus found it, but it was unable to remove it. I was reading for a while your posts on the blog, so I give a search for CashDialer. I’ve downloaded the removal tool and the virus is gone. For now on, SpyZooka is the program I’ll trust.