Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

SMARTWEBSVC.DLL is Adware SProtector

$
0
0

We received the file SMARTWEBSVC.DLL and detected that SMARTWEBSVC.DLL is not good.
SMARTWEBSVC.DLL is Adware. You should remove the file SMARTWEBSVC.DLL.
Kill the process SMARTWEBSVC.DLL and remove SMARTWEBSVC.DLL from Windows.

Malware Analysis of SMARTWEBSVC.DLL
Full path on a computer: %Common Appdata%\SmartWeb\SmartWebSvc.dll

Detected by UnHackMe:

SMARTWEBSVC.DLL
Default location: %Common Appdata%\SmartWeb\SmartWebSvc.dll

Removal Results: Success
Number of reboot: 1

SMARTWEBSVC.DLL is known as:

Adware.SProtector

SMARTWEBSVC.DLL hash:

  • MD5: f84f3e7e0bea5ca25d221b8bbad0e83b
The file tries to download information from some web sites.
How to quickly detect SMARTWEBSVC.DLL presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartWeb\SmartWeb.dll”,_uninstall /un”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{8461a914}\DisplayName: “SmartWeb”
  • HKLM\System\CurrentControlSet\Services\8461a914\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\smartweb\SmartWebSvc.dll”,service”
  • HKLM\System\CurrentControlSet\Services\8461a914\DisplayName: “SmartWeb”
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\smartweb\smartweb.dll”
Folders:
  • %Common Appdata%\SmartWeb
Files:
  • %Temp%\__tmp_2bb30765
  • %Common Appdata%\SmartWeb\SmartWeb.dll
  • %Common Appdata%\SmartWeb\SmartWebSvc.dll


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>