We received the file FASTANDSAFE.DLL and detected that FASTANDSAFE.DLL is not good.
FASTANDSAFE.DLL is Adware. You should remove the file FASTANDSAFE.DLL.
Kill the process FASTANDSAFE.DLL and remove FASTANDSAFE.DLL from Windows.
Malware Analysis of FASTANDSAFE.DLL
Full path on a computer: %Common Appdata%\Fast And Safe\FastAndSafe.dll
Detected by UnHackMe:
FASTANDSAFE.DLL
Default location: %Common Appdata%\Fast And Safe\FastAndSafe.dll
Removal Results: Success
Number of reboot: 1
FASTANDSAFE.DLL is known as:
Adware.SProtector.D, Troj.Undef.(kcloud)
FASTANDSAFE.DLL hash:
- MD5: cadf1b86e51b8d0aca2207fb472f3a32
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect FASTANDSAFE.DLL presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a34a6eb2}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\FASTAN~1\FASTAN~1.DLL”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a34a6eb2}\DisplayName: “Fast And Safe”
- HKLM\System\CurrentControlSet\Services\a34a6eb2\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\fastan~1\FastAndSafeSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\a34a6eb2\DisplayName: “Fast And Safe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\fastan~1\fastan~1.dll”
Folders:
- %Common Appdata%\Fast And Safe
Files:
- %Temp%\__tmp_1a3cf431
- %Common Appdata%\Fast And Safe\FastAndSafe.dll
- %Common Appdata%\Fast And Safe\FastAndSafeSvc.dll