1. /
  2. Security Response/
  3. Adware.Adsubscribe

Adware.Adsubscribe

Updated:
June 17, 2010 11:31:16 AM
Type:
Adware
Infection Length:
749,568 bytes
Name:
CMedia Agent
Version:
1.3.0.465
Publisher:
CMedia
Risk Impact:
Low
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows Server 2008, Windows 7, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
When the program is installed, it creates the following files:
  • %UserProfile%\Application Data\CMedia\CMedia.dat
  • %UserProfile%\Application Data\CMedia\feed.xml
  • %UserProfile%\Application Data\CMedia\g.fla
  • %UserProfile%\Application Data\CMedia\CMedia.dll


It then creates the following registry entries:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\CMediaShell\(default) = "{6B830884-20E3-4AB6-B672-2629F0F72071}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\(default) = "%USERAPPDATA%\CMedia\CMedia.dll"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\"ThreadingModel" = "Apartment"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\(default) = "CMediaShell"


The risk then displays Russian advertisements.

The uninstaller will not work until either a fixed number of advertisements have been shown or a fee has been paid.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver