We received the file WINWEBPROTECTIONSVC.DLL and detected that WINWEBPROTECTIONSVC.DLL is not good.
WINWEBPROTECTIONSVC.DLL is Adware. You should remove the file WINWEBPROTECTIONSVC.DLL.
Kill the process WINWEBPROTECTIONSVC.DLL and remove WINWEBPROTECTIONSVC.DLL from Windows.
Malware Analysis of WINWEBPROTECTIONSVC.DLL
Full path on a computer: %Common Appdata%\WinWeb protection\WinWebprotectionSvc.dll
Detected by UnHackMe:
WINWEBPROTECTIONSVC.DLL
Default location: %Common Appdata%\WinWeb protection\WinWebprotectionSvc.dll
Removal Results: Success
Number of reboot: 1
WINWEBPROTECTIONSVC.DLL is known as:
Adware.SProtector.D
WINWEBPROTECTIONSVC.DLL hash:
- MD5: 9453f9d5076aa35a3f59c182769f9162
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect WINWEBPROTECTIONSVC.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\System\CurrentControlSet\Services\84f07a66\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\winweb~1\WinWebprotectionSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\84f07a66\DisplayName: “WinWeb protection”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\winweb~1\winweb~1.dll”
Folders:- %Common Appdata%\WinWeb protection
Files:- %Temp%\__tmp_152ab627
- %Common Appdata%\WinWeb protection\WinWebprotection.dll
- %Common Appdata%\WinWeb protection\WinWebprotectionSvc.dll