We received the file BROWSAFESVC.DLL and detected that BROWSAFESVC.DLL is not good.
BROWSAFESVC.DLL is Adware. You should remove the file BROWSAFESVC.DLL.
Kill the process BROWSAFESVC.DLL and remove BROWSAFESVC.DLL from Windows.
Malware Analysis of BROWSAFESVC.DLL
Full path on a computer: %Common Appdata%\Browsafe\BrowsafeSvc.dll
Detected by UnHackMe:
BROWSAFESVC.DLL
Default location: %Common Appdata%\Browsafe\BrowsafeSvc.dll
Removal Results: Success
Number of reboot: 1
BROWSAFESVC.DLL is known as:
Adware.SProtector.D
BROWSAFESVC.DLL hash:
- MD5: eee77b6531f29efa37c52761bb18d9d7
The file tries to download information from some web sites.
How to quickly detect BROWSAFESVC.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{6739bb9d}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\Browsafe\Browsafe.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{6739bb9d}\DisplayName: “Browsafe”
- HKLM\System\CurrentControlSet\Services\6739bb9d\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\browsafe\BrowsafeSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\6739bb9d\DisplayName: “Browsafe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\browsafe\browsafe.dll”
Folders:- %Common Appdata%\Browsafe
Files:- %Temp%\__tmp_338d71bf
- %Common Appdata%\Browsafe\Browsafe.dll
- %Common Appdata%\Browsafe\BrowsafeSvc.dll