OFB1.DLL is Adware Owlforce

August 18, 2012 by NightWatcher
Filed under: Adware 
: Solved!

Fix it immediately:

We received the file OFB1.DLL and detected that OFB1.DLL is not good.
OFB1.DLL is Adware. You should remove the file OFB1.DLL.
Kill the process OFB1.DLL and remove OFB1.DLL from Windows.

Malware Analysis of OFB1.DLL
Full path on a computer: %Program Files%\Ofb1\Ofb1.dll

Detected by UnHackMe:

OFB1.DLL
Default location: %Program Files%\Ofb1\Ofb1.dll

Removal Results: Success
Number of reboot: 1

OFB1.DLL is known as:

Adware.Owlforce

OFB1.DLL hash:

  • MD5: 15b9a777bb8a5215d5169aae874c0651
The file tries to connect to the dangerous web site.
How to quickly detect OFB1.DLL presence?

Registry:
  • HKLM\Software\Classes\CLSID\{3E1500AC-87A5-416b-A211-82E848649DA9}\InprocServer32\: “C:\PROGRA~1\Ofb1\Ofb1.dll”
Folders:
  • %Program Files%\Ofb1
Files:
  • %AppData%\Microsoft\Protect\S-1-5-21-1659004503-1708537768-1801674531-500\0acbf11e-d310-4066-afbd-3c4084ab496b
  • %Temp%\Ofb1.exe
  • %Temp%\OpenIE_W.exe
  • %Program Files%\Ofb1\Ofb1.dll
  • %Program Files%\Ofb1\sites.ini
  • %WinDir%\waterfalls.bmp


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Tags: Adware, OFB1.DLL, Owlforce

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.