Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

INTELIWEB.DLL is Adware SProtector

$
0
0

We received the file INTELIWEB.DLL and detected that INTELIWEB.DLL is not good.
INTELIWEB.DLL is Adware. You should remove the file INTELIWEB.DLL.
Kill the process INTELIWEB.DLL and remove INTELIWEB.DLL from Windows.

Malware Analysis of INTELIWEB.DLL
Full path on a computer: %Common Appdata%\InteliWeb\InteliWeb.dll

Detected by UnHackMe:

INTELIWEB.DLL
Default location: %Common Appdata%\InteliWeb\InteliWeb.dll

Removal Results: Success
Number of reboot: 1

INTELIWEB.DLL is known as:

Adware.SProtector

INTELIWEB.DLL hash:

  • MD5: af3b100923f4f620f366046d442e2d1a
The file tries to connect to the dangerous web site.
How to quickly detect INTELIWEB.DLL presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{4701095d}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\INTELI~1\INTELI~1.DLL”,_uninstall /un”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{4701095d}\DisplayName: “InteliWeb”
  • HKLM\System\CurrentControlSet\Services\4701095d\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\inteli~1\InteliWebSvc.dll”,service”
  • HKLM\System\CurrentControlSet\Services\4701095d\DisplayName: “InteliWeb”
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\inteli~1\inteli~1.dll”
Folders:
  • %Common Appdata%\InteliWeb
Files:
  • %Temp%\__tmp_2c6f7bea
  • %Common Appdata%\InteliWeb\InteliWeb.dll
  • %Common Appdata%\InteliWeb\InteliWebSvc.dll


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>