We received the file WEBTECTSVC.DLL and detected that WEBTECTSVC.DLL is not good.
WEBTECTSVC.DLL is Adware. You should remove the file WEBTECTSVC.DLL.
Kill the process WEBTECTSVC.DLL and remove WEBTECTSVC.DLL from Windows.
Malware Analysis of WEBTECTSVC.DLL
Full path on a computer: %Common Appdata%\WebTect\WebTectSvc.dll
Detected by UnHackMe:
WEBTECTSVC.DLL
Default location: %Common Appdata%\WebTect\WebTectSvc.dll
Removal Results: Success
Number of reboot: 1
WEBTECTSVC.DLL is known as:
Adware.SProtector
WEBTECTSVC.DLL hash:
- MD5: 48824977ab023140b8dbdbbcb4f8a8f3
The file tries to download information from some web sites.
How to quickly detect WEBTECTSVC.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f3af07c5}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WebTect\WebTect.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f3af07c5}\DisplayName: “WebTect”
- HKLM\System\CurrentControlSet\Services\f3af07c5\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\webtect\WebTectSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\f3af07c5\DisplayName: “WebTect”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\webtect\webtect.dll”
Folders:- %Common Appdata%\WebTect
Files:- %Temp%\__tmp_102d2c47
- %Common Appdata%\WebTect\WebTect.dll
- %Common Appdata%\WebTect\WebTectSvc.dll