We received the file WINDOWSNET-CLEAN.DLL and detected that WINDOWSNET-CLEAN.DLL is not good.
WINDOWSNET-CLEAN.DLL is Adware. You should remove the file WINDOWSNET-CLEAN.DLL.
Kill the process WINDOWSNET-CLEAN.DLL and remove WINDOWSNET-CLEAN.DLL from Windows.
Malware Analysis of WINDOWSNET-CLEAN.DLL
Full path on a computer: %Common Appdata%\Windows net-clean\Windowsnet-clean.dll
Detected by UnHackMe:
WINDOWSNET-CLEAN.DLL
Default location: %Common Appdata%\Windows net-clean\Windowsnet-clean.dll
Removal Results: Success
Number of reboot: 1
WINDOWSNET-CLEAN.DLL is known as:
Adware.SProtector.D
WINDOWSNET-CLEAN.DLL hash:
- MD5: 1db513bd7845832091b94d7c1e3c5c53
The file tries to download information from some web sites.
How to quickly detect WINDOWSNET-CLEAN.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{699705af}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WINDOW~1\WINDOW~1.DLL”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{699705af}\DisplayName: “Windows net-clean”
- HKLM\System\CurrentControlSet\Services\699705af\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\window~1\Windowsnet-cleanSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\699705af\DisplayName: “Windows net-clean”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\window~1\window~1.dll”
Folders:- %Common Appdata%\Windows net-clean
Files:- %Temp%\__tmp_2e31fcf8
- %Common Appdata%\Windows net-clean\Windowsnet-clean.dll
- %Common Appdata%\Windows net-clean\Windowsnet-cleanSvc.dll