Remove CrossKirk. Description and removal instructions

Title: CrossKirk
Type: Dialers	Severity scale: (52 / 100)

CrossKirk is a dialer that connects a compromised computer to the Internet by dialing high-cost phone numbers using a modem. The parasite is designed to provide paid access to pornographic resources. CrossKirk also creates several desktop shortcuts and Start Menu entries. The threat can get into the system while visiting some insecure adult web sites. It automatically runs on every Windows startup.

FORUM:
Discuss CrossKirk in
spyware removal forum

CrossKirk properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic CrossKirk removal:

remover for CrossKirk

CrossKirk manual removal:

Kill processes:
ddialer.exe, kernel32.exe, menf[X].exe, od-asia[X].exe, od-stdn[X].exe, od-teen[X].exe, st-hc[X].exe, tlk[X].exe, sexgay.gif

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Webdialer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\tlk[X].exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webdialer_li-[filename]

HELP:
how to remove registry entries

Delete files:
ddialer.exe, kernel32.exe, menf[X].exe, od-asia[X].exe, od-stdn[X].exe, od-teen[X].exe, st-hc[X].exe, tlk[X].exe, sexgay.gif

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\Webdialer
Misc:
[X] is a set of random digits and symbols.

The sexgay.gif file despite the .gif extension is not an image, but an executable that installs the dialer.

CrossKirk uses numerous files with random names.

Other programs to remove CrossKirk:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 01/10/05

Additional resources related to CrossKirk:

Attention: If you know or you have a website or page about CrossKirk removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about CrossKirk parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.