We received the file WINSPEED.DLL and detected that WINSPEED.DLL is not good.
WINSPEED.DLL is Adware. You should remove the file WINSPEED.DLL.
Kill the process WINSPEED.DLL and remove WINSPEED.DLL from Windows.
Malware Analysis of WINSPEED.DLL
Full path on a computer: %Common Appdata%\WinSpeed\WinSpeed.dll
Detected by UnHackMe:
WINSPEED.DLL
Default location: %Common Appdata%\WinSpeed\WinSpeed.dll
Removal Results: Success
Number of reboot: 1
WINSPEED.DLL is known as:
Adware.SProtector, BProtector, Adware.SProtector, a variant of Win32.SProtector.E, AdWare.Bprotector, Trojan.SProtector.E
WINSPEED.DLL hash:
- MD5: c5632f135bf3bd3dffaa728c2f1e9399
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect WINSPEED.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{41f15de4}\UninstallString: “”%SysDir%\RUNDLL32.EXE” “C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinSpeed\WinSpeed.dll”,_uninstall /un”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{41f15de4}\DisplayName: “WinSpeed”
- HKLM\System\CurrentControlSet\Services\41f15de4\ImagePath: “”%SysDir%\rundll32.exe” “c:\docume~1\alluse~1\applic~1\winspeed\WinSpeedSvc.dll”,service”
- HKLM\System\CurrentControlSet\Services\41f15de4\DisplayName: “WinSpeed”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “c:\docume~1\alluse~1\applic~1\winspeed\winspeed.dll”
Folders:- %Common Appdata%\WinSpeed
Files:- %Temp%\__tmp_11480bb2
- %Common Appdata%\WinSpeed\WinSpeed.dll
- %Common Appdata%\WinSpeed\WinSpeedSvc.dll