1. /
  2. Security Response/
  3. Adware.Adsubscribe

Adware.Adsubscribe

Updated:
June 17, 2010 11:31:16 AM
Type:
Adware
Infection Length:
749,568 bytes
Name:
CMedia Agent
Version:
1.3.0.465
Publisher:
CMedia
Risk Impact:
Low
Systems Affected:
Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
When the program is installed, it creates the following files:
  • %UserProfile%\Application Data\CMedia\CMedia.dat
  • %UserProfile%\Application Data\CMedia\feed.xml
  • %UserProfile%\Application Data\CMedia\g.fla
  • %UserProfile%\Application Data\CMedia\CMedia.dll


It then creates the following registry entries:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\CMediaShell\(default) = "{6B830884-20E3-4AB6-B672-2629F0F72071}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\(default) = "%USERAPPDATA%\CMedia\CMedia.dll"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\"ThreadingModel" = "Apartment"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\(default) = "CMediaShell"


The risk then displays Russian advertisements.

The uninstaller will not work until either a fixed number of advertisements have been shown or a fee has been paid.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver