Cannot remove "Webdialer".

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Podgers, Sep 17, 2004.

  1. Podgers

    Podgers Private E-2

    I have a program called "Webdialer" that I cannot get off of my computer. No, it's not doing a whole lot of damage, but it is incredibly annoying. The program is a porn web dialer, and while I haven't given out my credit card info, it starts up every time I start Windows.

    AdAware doesn't remove this program, but it did provide me with four different locations in the HKEY_ directories where this thing likes to hang out. When I have gone in there to remove it, I can only find two of the locations; the other two simply don't seem to exist.

    I would be happy to provide additional information if anyone thinks it will help me solve this. Again, not a life-threatening situation, but I would love to get this off of my laptop.

    Thanks in advance for the advice!

    MPJ
     
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    First off try and uninstall it from Add\Remove programs.


    From there you have 2 options.

    Manual removal
    Please follow the instructions below if you would like to remove WebDialer manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If WebDialer remains on your system after stepping through the removal instructions, please double-check by stepping through them again.
    Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
    Browse to the key:
    HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
    In the right pane, delete the value pointing to 'C:\Program Files\Webdialer\', if it exists. The values usually looks something like this: od-dflt0001, od-teen7, od-teen22, od-ftsh47, od-teen88, od-teen98, od-teen185.
    Exit the registry editor.
    Restart your computer.
    Start Windows Explorer and delete:
    C:\Program Files\Webdialer\

    Thanks to http://www.kephyr.com/spywarescanner/library/webdialer/index.phtml for that.

    Second, run our tutorial and do a complete system scan:
    http://forums.majorgeeks.com/showthread.php?t=35407

    Let us know.
     
  3. Podgers

    Podgers Private E-2

    I appreciate the response. Thanks so much.

    Unfortunately, the suggestions didn't work.

    1.) Webdialer is not listed under the Add/Remove programs.

    2.) I followed the folder chain you suggested, and there was no Webdialer listed under:

    HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run

    When I run AdAware (which I downloaded from this site and use as my spyware screener), I get Webdialer listed in the following directories:

    ++++++++++++++++++++++++++++++++

    WebDialer Object Recognized!
    Type : Regkey
    Data :
    Category : Malware
    Comment :
    Rootkey : HKEY_USERS
    Object : S-1-5-21-448539723-688789844-1202660629-1004\software\webdialer

    WebDialer Object Recognized!
    Type : Regkey
    Data : Webdialer
    Category : Malware
    Comment :
    Rootkey : HKEY_USERS
    Object : .DEFAULT\software\microsoft\windows\currentversion\uninstall\Webdialer - Webdialer Reg.N:26-1-2-1

    WebDialer Object Recognized!
    Type : Regkey
    Data : Webdialer
    Category : Malware
    Comment :
    Rootkey : HKEY_USERS
    Object : S-1-5-21-448539723-688789844-1202660629-1004\software\microsoft\windows\currentversion\uninstall\Webdialer - Webdialer Reg.N:26-1-2-1

    WebDialer Object Recognized!
    Type : Regkey
    Data : Webdialer
    Category : Malware
    Comment :
    Rootkey : HKEY_LOCAL_MACHINE
    Object : software\microsoft\windows\currentversion\uninstall\Webdialer - Webdialer Reg.N:26-1-2-1

    ++++++++++++++++++++++++++++++

    Unfortunately, when I get to these directories, only the first of the four is actually there. I have deleted it a number of times now, and I each time I restart Windows, the Webdialer starts as well.

    I appreciate any additional suggestions.

    MPJ
     
  4. Podgers

    Podgers Private E-2

    I came back in on Monday and didn't find any other replies to this question. Can anyone shoot some help my way? Thanks in advance. I greatly appreciate it.

    MPJ
     
  5. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

  6. Podgers

    Podgers Private E-2

    I will do this and report back. Thanks, MPJ
     
  7. Podgers

    Podgers Private E-2

    Unfortunately, I followed the instructions to the letter and Webdialer is STILL there. [Groan.] Still looking for help as to how to remove this little bugger.

    MPJ
     
  8. franky1

    franky1 Private E-2

    Try This--Next time the dialer pops up, dont shut it --start AdAware & let it run a couple minutes till it finds all running processes- then abort & click on the logfile button. You should be able to pinpoint where it is from that. Mine happened to be in Windows/sytem/sexxx.exe. Delete it &you should be good. Also check for Windows/system/DKTime. It seems to have something to do with the dialer. You'll have to go into Run: msconfig & uncheck it first ,then reboot & you should be able to delete it. I still get a dialer update request now & then but its better than it was. These things should be illegal.Good Luck!!!!!!
     
  9. franky1

    franky1 Private E-2

    If you are still trying to remove that dialer -I think I can help
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds