Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

SMARTWEB.DLL is Adware SProtector

$
0
0

We received the file SMARTWEB.DLL and detected that SMARTWEB.DLL is not good.
SMARTWEB.DLL is Adware. You should remove the file SMARTWEB.DLL.
Kill the process SMARTWEB.DLL and remove SMARTWEB.DLL from Windows.

Malware Analysis of SMARTWEB.DLL
Full path on a computer: %Common Appdata%\SmartWeb\SmartWeb.dll

Detected by UnHackMe:

SMARTWEB.DLL
Default location: %Common Appdata%\SmartWeb\SmartWeb.dll

Removal Results: Success
Number of reboot: 1

SMARTWEB.DLL is known as:

Adware.SProtector

SMARTWEB.DLL hash:

  • MD5: fe99f627e05bebaae95e5daf0c89c16a
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect SMARTWEB.DLL presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartWeb\SmartWeb.dll”,_uninstall /un”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\DisplayName: “SmartWeb”
  • HKLM\System\CurrentControlSet\Services\8461a914\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\smartweb\SmartWebSvc.dll”,service”
  • HKLM\System\CurrentControlSet\Services\8461a914\DisplayName: “SmartWeb”
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\smartweb\smartweb.dll”
Folders:
  • %Common Appdata%\SmartWeb
Files:
  • %Temp%\__tmp_2bb30765
  • %Common Appdata%\SmartWeb\SmartWeb.dll
  • %Common Appdata%\SmartWeb\SmartWebSvc.dll


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>