1. /
  2. Security Response/
  3. Adware.NetMedia

Adware.NetMedia

Updated:
August 17, 2006 3:10:39 PM
Type:
Adware
Risk Impact:
Medium
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Adware.NetMedia is a security risk that displays advertisements while a user browses the Internet.

When the risk is first executed, it creates the following files:
%Windir%\netmedia.exe
%Windir%\netmedia.ini

Next, the risk creates the following registry entries so that it runs every time Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"{29123221-3AF8-488c-85DE-6B3EC59E8074}" = "%Windir%\netmedia.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"{29123221-3AF8-488c-85DE-6B3EC59E8074}" = "%Windir%\netmedia.exe"

The risk then creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{29123221-3AF8-488c-85DE-6B3EC59E8074}
HKEY_CLASSES_ROOT\CLSID\{29123221-3AF8-488c-85DE-6B3EC59E8074}

The risk then displays advertisements while the user browses the Internet.
Summary| Technical Details

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver