Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

INTERENETOPTIMIZERSVC.DLL is Adware SProtector.D

$
0
0

We received the file INTERENETOPTIMIZERSVC.DLL and detected that INTERENETOPTIMIZERSVC.DLL is not good.
INTERENETOPTIMIZERSVC.DLL is Adware. You should remove the file INTERENETOPTIMIZERSVC.DLL.
Kill the process INTERENETOPTIMIZERSVC.DLL and remove INTERENETOPTIMIZERSVC.DLL from Windows.

Malware Analysis of INTERENETOPTIMIZERSVC.DLL
Full path on a computer: %Common Appdata%\Interenet Optimizer\InterenetOptimizerSvc.dll

Detected by UnHackMe:

INTERENETOPTIMIZERSVC.DLL
Default location: %Common Appdata%\Interenet Optimizer\InterenetOptimizerSvc.dll

Removal Results: Success
Number of reboot: 1

INTERENETOPTIMIZERSVC.DLL is known as:

Adware.SProtector.D

INTERENETOPTIMIZERSVC.DLL hash:

  • MD5: a401f59db362c83cbf98f0f7c71df0a1
The file tries to download information from some web sites.
How to quickly detect INTERENETOPTIMIZERSVC.DLL presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{82de725f}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\INTERE~1\INTERE~1.DLL”,_uninstall /un”
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{82de725f}\DisplayName: “Interenet Optimizer”
  • HKLM\System\CurrentControlSet\Services\82de725f\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\intere~1\InterenetOptimizerSvc.dll”,service”
  • HKLM\System\CurrentControlSet\Services\82de725f\DisplayName: “Interenet Optimizer”
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\intere~1\intere~1.dll”
Folders:
  • %Common Appdata%\Interenet Optimizer
Files:
  • %Temp%\__tmp_0c4a81d2
  • %Common Appdata%\Interenet Optimizer\InterenetOptimizer.dll
  • %Common Appdata%\Interenet Optimizer\InterenetOptimizerSvc.dll


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>