We received the file BROWSAFE.DLL and detected that BROWSAFE.DLL is not good.
BROWSAFE.DLL is Adware. You should remove the file BROWSAFE.DLL.
Kill the process BROWSAFE.DLL and remove BROWSAFE.DLL from Windows.
Malware Analysis of BROWSAFE.DLL
Full path on a computer: %Common Appdata%\Browsafe\Browsafe.dll
Detected by UnHackMe:
BROWSAFE.DLL
Default location: %Common Appdata%\Browsafe\Browsafe.dll
Removal Results: Success
Number of reboot: 1
BROWSAFE.DLL is known as:
Adware.SProtector.D
BROWSAFE.DLL hash:
- MD5: 162fb37bb3d3e25267b77e2a90f1d26f
The file tries to download information from some web sites.
How to quickly detect BROWSAFE.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{6739bb9d}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\Browsafe\Browsafe.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{6739bb9d}\DisplayName: “Browsafe”
- HKLM\System\CurrentControlSet\Services\6739bb9d\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\browsafe\BrowsafeSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\6739bb9d\DisplayName: “Browsafe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\browsafe\browsafe.dll”
Folders:- %Common Appdata%\Browsafe
Files:- %Temp%\__tmp_338d71bf
- %Common Appdata%\Browsafe\Browsafe.dll
- %Common Appdata%\Browsafe\BrowsafeSvc.dll