We received the file FASTANDSAFESVC.DLL and detected that FASTANDSAFESVC.DLL is not good.
FASTANDSAFESVC.DLL is Adware. You should remove the file FASTANDSAFESVC.DLL.
Kill the process FASTANDSAFESVC.DLL and remove FASTANDSAFESVC.DLL from Windows.
Malware Analysis of FASTANDSAFESVC.DLL
Full path on a computer: %Common Appdata%\Fast And Safe\FastAndSafeSvc.dll
Detected by UnHackMe:
FASTANDSAFESVC.DLL
Default location: %Common Appdata%\Fast And Safe\FastAndSafeSvc.dll
Removal Results: Success
Number of reboot: 1
FASTANDSAFESVC.DLL is known as:
Adware.SProtector.D
FASTANDSAFESVC.DLL hash:
- MD5: 4636a170c07af84f03d798ee3931219e
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect FASTANDSAFESVC.DLL presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a34a6eb2}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\FASTAN~1\FASTAN~1.DLL”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{a34a6eb2}\DisplayName: “Fast And Safe”
- HKLM\System\CurrentControlSet\Services\a34a6eb2\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\fastan~1\FastAndSafeSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\a34a6eb2\DisplayName: “Fast And Safe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\fastan~1\fastan~1.dll”
Folders:
- %Common Appdata%\Fast And Safe
Files:
- %Temp%\__tmp_1a3cf431
- %Common Appdata%\Fast And Safe\FastAndSafe.dll
- %Common Appdata%\Fast And Safe\FastAndSafeSvc.dll