Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

WEBTECT.DLL is Adware SProtector

$
0
0

We received the file WEBTECT.DLL and detected that WEBTECT.DLL is not good.
WEBTECT.DLL is Adware. You should remove the file WEBTECT.DLL.
Kill the process WEBTECT.DLL and remove WEBTECT.DLL from Windows.

Malware Analysis of WEBTECT.DLL
Full path on a computer: %Common Appdata%\WebTect\WebTect.dll

Detected by UnHackMe:

WEBTECT.DLL
Default location: %Common Appdata%\WebTect\WebTect.dll

Removal Results: Success
Number of reboot: 1

WEBTECT.DLL is known as:

Adware.SProtector

WEBTECT.DLL hash:

  • MD5: bcc36b339fa297947f2ec22b181ab429
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect WEBTECT.DLL presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f3af07c5}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WebTect\WebTect.dll”,_uninstall /un”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f3af07c5}\DisplayName: “WebTect”
  • HKLM\System\CurrentControlSet\Services\f3af07c5\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\webtect\WebTectSvc.dll”,service”
  • HKLM\System\CurrentControlSet\Services\f3af07c5\DisplayName: “WebTect”
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\webtect\webtect.dll”
Folders:
  • %Common Appdata%\WebTect
Files:
  • %Temp%\__tmp_102d2c47
  • %Common Appdata%\WebTect\WebTect.dll
  • %Common Appdata%\WebTect\WebTectSvc.dll


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>