1. Symantec/
  2. Security Response/
  3. Adware.Adsubscribe

Adware.Adsubscribe

Updated:
June 17, 2010 11:31:16 AM
Type:
Adware
Infection Length:
749,568 bytes
Name:
CMedia Agent
Version:
1.3.0.465
Publisher:
CMedia
Risk Impact:
Low
Systems Affected:
Windows
When the program is installed, it creates the following files:
  • %UserProfile%\Application Data\CMedia\CMedia.dat
  • %UserProfile%\Application Data\CMedia\feed.xml
  • %UserProfile%\Application Data\CMedia\g.fla
  • %UserProfile%\Application Data\CMedia\CMedia.dll


It then creates the following registry entries:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\CMediaShell\(default) = "{6B830884-20E3-4AB6-B672-2629F0F72071}"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\(default) = "%USERAPPDATA%\CMedia\CMedia.dll"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\InprocServer32\"ThreadingModel" = "Apartment"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B830884-20E3-4AB6-B672-2629F0F72071}\(default) = "CMediaShell"


The risk then displays Russian advertisements.

The uninstaller will not work until either a fixed number of advertisements have been shown or a fee has been paid.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube