We received the file INTELISMARTWEBBING.DLL and detected that INTELISMARTWEBBING.DLL is not good.
INTELISMARTWEBBING.DLL is Adware. You should remove the file INTELISMARTWEBBING.DLL.
Kill the process INTELISMARTWEBBING.DLL and remove INTELISMARTWEBBING.DLL from Windows.
Malware Analysis of INTELISMARTWEBBING.DLL
Full path on a computer: %Common Appdata%\Intelismart webbing\Intelismartwebbing.dll
Detected by UnHackMe:
INTELISMARTWEBBING.DLL
Default location: %Common Appdata%\Intelismart webbing\Intelismartwebbing.dll
Removal Results: Success
Number of reboot: 1
INTELISMARTWEBBING.DLL is known as:
Adware.IntelismartWebbing
INTELISMARTWEBBING.DLL hash:
- MD5: dccf9d8751689e0f644530ba9326a18a
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect INTELISMARTWEBBING.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{649a450}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\INTELI~1\INTELI~1.DLL”,_uninstall /un”
- HKLM\System\CurrentControlSet\Services\0649a450\Security\Security: 01 00 14 80 90 00 00 00 9C 00 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 60 00 04 00 00 00 00 00 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 18 00 FF 01 0F 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 00 14 00 8D 01 02 00 01 01 00 00 00 00 00 05 0B 00 00 00 00 00 18 00 FD 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 23 02 00 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00
- HKLM\System\CurrentControlSet\Services\0649a450\Type: 0×00000010
- HKLM\System\CurrentControlSet\Services\0649a450\Start: 0×00000002
- HKLM\System\CurrentControlSet\Services\0649a450\ErrorControl: 0×00000000
- HKLM\System\CurrentControlSet\Services\0649a450\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\inteli~1\IntelismartwebbingSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\0649a450\DisplayName: “Intelismart webbing”
- HKLM\System\CurrentControlSet\Services\0649a450\ObjectName: “LocalSystem”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\inteli~1\inteli~1.dll”
Folders:- %Common Appdata%\Intelismart webbing
Files:- %Temp%\__tmp_3a614f8f
- %Common Appdata%\Intelismart webbing\Intelismartwebbing.dll
- %Common Appdata%\Intelismart webbing\IntelismartwebbingSvc.dll