We received the file SMOOTHBROWSING.DLL and detected that SMOOTHBROWSING.DLL is not good.
SMOOTHBROWSING.DLL is Adware. You should remove the file SMOOTHBROWSING.DLL.
Kill the process SMOOTHBROWSING.DLL and remove SMOOTHBROWSING.DLL from Windows.
Malware Analysis of SMOOTHBROWSING.DLL
Full path on a computer: %Common Appdata%\Smooth Browsing\SmoothBrowsing.dll
Detected by UnHackMe:
SMOOTHBROWSING.DLL
Default location: %Common Appdata%\Smooth Browsing\SmoothBrowsing.dll
Removal Results: Success
Number of reboot: 1
SMOOTHBROWSING.DLL is known as:
Adware.SProtector
SMOOTHBROWSING.DLL hash:
- MD5: 7dca73595a39aa1e9a958b83af5ac9a5
The file tries to download information from some web sites.
How to quickly detect SMOOTHBROWSING.DLL presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{751b109}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\SMOOTH~1\SMOOTH~1.DLL”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{751b109}\DisplayName: “Smooth Browsing”
- HKLM\System\CurrentControlSet\Services\0751b109\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\smooth~1\SmoothBrowsingSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\0751b109\DisplayName: “Smooth Browsing”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\smooth~1\smooth~1.dll”
Folders:
- %Common Appdata%\Smooth Browsing
Files:
- %Temp%\__tmp_2e31fcf8
- %Common Appdata%\Smooth Browsing\SmoothBrowsing.dll
- %Common Appdata%\Smooth Browsing\SmoothBrowsingSvc.dll