We received the file SMOOTHBROWSINGSVC.DLL and detected that SMOOTHBROWSINGSVC.DLL is not good.
SMOOTHBROWSINGSVC.DLL is Adware. You should remove the file SMOOTHBROWSINGSVC.DLL.
Kill the process SMOOTHBROWSINGSVC.DLL and remove SMOOTHBROWSINGSVC.DLL from Windows.
Malware Analysis of SMOOTHBROWSINGSVC.DLL
Full path on a computer: %Common Appdata%\Smooth Browsing\SmoothBrowsingSvc.dll
Detected by UnHackMe:
SMOOTHBROWSINGSVC.DLL
Default location: %Common Appdata%\Smooth Browsing\SmoothBrowsingSvc.dll
Removal Results: Success
Number of reboot: 1
SMOOTHBROWSINGSVC.DLL is known as:
Adware.SProtector
SMOOTHBROWSINGSVC.DLL hash:
- MD5: e60ceb4f53e56fbb9084b3a07bdc839b
The file tries to connect to the dangerous web site.
How to quickly detect SMOOTHBROWSINGSVC.DLL presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{751b109}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\SMOOTH~1\SMOOTH~1.DLL”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{751b109}\DisplayName: “Smooth Browsing”
- HKLM\System\CurrentControlSet\Services\0751b109\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\smooth~1\SmoothBrowsingSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\0751b109\DisplayName: “Smooth Browsing”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\smooth~1\smooth~1.dll”
Folders:
- %Common Appdata%\Smooth Browsing
Files:
- %Temp%\__tmp_2e31fcf8
- %Common Appdata%\Smooth Browsing\SmoothBrowsing.dll
- %Common Appdata%\Smooth Browsing\SmoothBrowsingSvc.dll