We received the file WEBPLATSVC.DLL and detected that WEBPLATSVC.DLL is not good.
WEBPLATSVC.DLL is Adware. You should remove the file WEBPLATSVC.DLL.
Kill the process WEBPLATSVC.DLL and remove WEBPLATSVC.DLL from Windows.
Malware Analysis of WEBPLATSVC.DLL
Full path on a computer: %Common Appdata%\WebPlat\WebPlatSvc.dll
Detected by UnHackMe:
WEBPLATSVC.DLL
Default location: %Common Appdata%\WebPlat\WebPlatSvc.dll
Removal Results: Success
Number of reboot: 1
WEBPLATSVC.DLL is known as:
Adware.SProtector.D
WEBPLATSVC.DLL hash:
- MD5: e14137b260e9e724e0f64d0f2a562c27
The file tries to connect to the dangerous web site.
How to quickly detect WEBPLATSVC.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{412ac99f}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WebPlat\WebPlat.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{412ac99f}\DisplayName: “WebPlat”
- HKLM\System\CurrentControlSet\Services\412ac99f\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\webplat\WebPlatSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\412ac99f\DisplayName: “WebPlat”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\webplat\webplat.dll”
Folders:- %Common Appdata%\WebPlat
Files:- %Temp%\__tmp_01dd4f03
- %Common Appdata%\WebPlat\WebPlat.dll
- %Common Appdata%\WebPlat\WebPlatSvc.dll