We received the file SMARTWEB.DLL and detected that SMARTWEB.DLL is not good.
SMARTWEB.DLL is Adware. You should remove the file SMARTWEB.DLL.
Kill the process SMARTWEB.DLL and remove SMARTWEB.DLL from Windows.
Malware Analysis of SMARTWEB.DLL
Full path on a computer: %Common Appdata%\SmartWeb\SmartWeb.dll
Detected by UnHackMe:
SMARTWEB.DLL
Default location: %Common Appdata%\SmartWeb\SmartWeb.dll
Removal Results: Success
Number of reboot: 1
SMARTWEB.DLL is known as:
Adware.SProtector
SMARTWEB.DLL hash:
- MD5: fe99f627e05bebaae95e5daf0c89c16a
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect SMARTWEB.DLL presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartWeb\SmartWeb.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\DisplayName: “SmartWeb”
- HKLM\System\CurrentControlSet\Services\8461a914\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\smartweb\SmartWebSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\8461a914\DisplayName: “SmartWeb”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\smartweb\smartweb.dll”
Folders:
- %Common Appdata%\SmartWeb
Files:
- %Temp%\__tmp_2bb30765
- %Common Appdata%\SmartWeb\SmartWeb.dll
- %Common Appdata%\SmartWeb\SmartWebSvc.dll