home

services.dll

The module services.dll has been detected as a potentially unwanted program by 36 anti-malware scanners.
MD5:
4666b6a961f8cde776671f1c1ce952c9

SHA-1:
a5ae77124e62f810ceb4831cf94fcdb49af3919c

Scanner detections:
36 / 68

Status:
Potentially unwanted

Analysis date:
4/1/2025 7:26:20 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Softomate.V
-40

Agnitum Outpost
Adware.Agent
7.1.1

AhnLab V3 Security
Win-Trojan/Softomate.5120
2015.03.11

Avira AntiVirus
ADSPY/Softomate.U.23
7.11.215.236

avast!
Win32:Adware-gen [Adw]
2014.9-170315

AVG
Generic
2018.0.2438

Baidu Antivirus
Adware.Win32.Mostofate
4.0.3.17315

Bitdefender
Adware.Softomate.V
1.0.20.370

Clam AntiVirus
Adware.Softomate-3
0.98/21511

Comodo Security
Application.Win32.AdWare.Agent.~CZS
21366

Dr.Web
Adware.Softomate.225
9.0.1.074

Emsisoft Anti-Malware
Adware.Softomate.V
8.17.03.15.08

Fortinet FortiGate
Malware_fam.gw
3/15/2017

F-Prot
W32/Adware.EGQ
v6.4.7.1.166

F-Secure
Adware.Softomate.V
11.2017-15-03_4

G Data
Adware.Softomate
17.3.25

IKARUS anti.virus
not-a-virus:AdWare.Win32.Mostofate
t3scan.1.8.6.0

Kaspersky
not-a-virus:AdWare.Win32.Mostofate
14.0.0.-1314

Malwarebytes
Adware.Softomate
v2017.03.15.08

McAfee
generic!bg
5600.6094

Microsoft Security Essentials
BrowserModifier:Win32/Toolbar888
1.1.11400.0

MicroWorld eScan
Adware.Softomate.V
18.0.0.222

NANO AntiVirus
Riskware.Win32.Mostofate.cwyhqi
0.30.0.296

nProtect
Trojan-Clicker/W32.Softomate.5120
15.03.10.01

Panda Antivirus
Adware/ActiveSearch
17.03.15.08

Qihoo 360 Security
Win32/Trojan.def
1.0.0.1015

Quick Heal
Adware.Softomate.u.n5 (Not a Virus)
3.17.14.00

Reason Heuristics
Adware.Generic.AT (M)
17.3.15.20

Rising Antivirus
PE:Trojan.DL.Agent.xdg!1074158362
23.00.65.17313

Sophos
Generic PUA KF
4.98

Total Defense
Win32/Matcash.Z
37.0.11488

Trend Micro House Call
ADW_SOFTOMATE.EK
7.2.74

Trend Micro
ADW_SOFTOMATE.EK
10.465.15

Vba32 AntiVirus
AdWare.Mostofate
3.12.26.3

VIPRE Antivirus
Freeprod/Toolbar888
38312

ViRobot
Adware.Softomate.5120[h]
2014.3.20.0

File size:
5 KB (5,120 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\services.dll

File PE Metadata
Compilation timestamp:
7/4/2006 4:58:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0x11C0

Entry point:
8B, 44, 24, 04, A3, 0C, 30, 00, 10, 33, C0, 40, C2, 0C, 00, A1, 10, 30, 00, 10, 85, C0, 56, 74, 29, 8B, 30, 85, F6, 74, 23, 8D, 46, 04, 50, FF, 74, 24, 0C, FF, 15, 0C, 20, 00, 10, 8B, 06, 8B, 0D, 10, 30, 00, 10, 56, 89, 01, FF, 15, 14, 20, 00, 10, 33, C0, 5E, C3, 33, C0, 40, 5E, C3, 83, 3D, 10, 30, 00, 10, 00, 74, 3B, A1, 14, 30, 00, 10, 56, 05, 04, 04, 00, 00, 50, 6A, 40, FF, 15, 04, 20, 00, 10, FF, 35, 14, 30, 00, 10, 8B, F0, FF, 74, 24, 0C, 8D, 46, 04, 50, FF, 15, 08, 20, 00, 10, A1, 10, 30, 00, 10, 8B...
 
[+]

Code size:
1.5 KB (1,536 bytes)

Remove services.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.