We received the file WEBPLAT.DLL and detected that WEBPLAT.DLL is not good.
WEBPLAT.DLL is Adware. You should remove the file WEBPLAT.DLL.
Kill the process WEBPLAT.DLL and remove WEBPLAT.DLL from Windows.
Malware Analysis of WEBPLAT.DLL
Full path on a computer: %Common Appdata%\WebPlat\WebPlat.dll
Detected by UnHackMe:
WEBPLAT.DLL
Default location: %Common Appdata%\WebPlat\WebPlat.dll
Removal Results: Success
Number of reboot: 1
WEBPLAT.DLL is known as:
Adware.SProtector.D
WEBPLAT.DLL hash:
- MD5: a991b622a2cdf0ab5fbae994dabfe60e
The file tries to connect to the dangerous web site.
How to quickly detect WEBPLAT.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{412ac99f}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WebPlat\WebPlat.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{412ac99f}\DisplayName: “WebPlat”
- HKLM\System\CurrentControlSet\Services\412ac99f\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\webplat\WebPlatSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\412ac99f\DisplayName: “WebPlat”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\webplat\webplat.dll”
Folders:- %Common Appdata%\WebPlat
Files:- %Temp%\__tmp_01dd4f03
- %Common Appdata%\WebPlat\WebPlat.dll
- %Common Appdata%\WebPlat\WebPlatSvc.dll